PT-2020-14056 · Softing · Softing Industrial Automation

Published 2020-08-25 · Updated 2021-09-23 · CVE-2020-14524

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Softing Industrial Automation versions prior to 4.47.0

Description The affected product is vulnerable to a heap-based buffer overflow, which may allow an attacker to remotely execute arbitrary code.

Recommendations For versions prior to 4.47.0, update to the latest build of version 4.47.0 to resolve the issue.

Fix

Heap Based Buffer Overflow

Memory Corruption

Weakness Enumeration

CWE-122

CWE-787

Related Identifiers

CVE-2020-14524

Affected Products

Softing Industrial Automation

References · 3

• https://nvd.nist.gov/vuln/detail/CVE-2020-14524 · Security Note
• https://osv.dev/vulnerability/CVE-2020-14524 · Vendor Advisory
• https://us-cert.cisa.gov/ics/advisories/icsa-20-210-02 · Note