CVE-2020-10620: OPTO22 Softpac Project

Critical severity, CVSS 9.8. EPSS: 1.2% chance of exploitation in the next 30 days.

Opto 22 SoftPAC Project Version 9.6 and prior. SoftPAC communication does not include any credentials. This allows an attacker with network access to directly communicate with SoftPAC, including, for example, stopping the service remotely.

Affected products

• OPTO22 Softpac Project: up to and including 9.6

Published 2020-05-14. Last modified 2026-06-17.