Sick Sopas Engineering Tool vulnerabilities

3 CVEs affecting Sick Sopas Engineering Tool, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2021-32499, published 2021-12-17.

More from Sick.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2021-32498, published 2021-12-17. High severity, CVSS 8.6. EPSS: 1% chance of exploitation in the next 30 days. SICK SOPAS ET before version 4.8.0 allows attackers to manipulate the pathname of the emulator and use path traversal to run an arbitrary executable located on the host system. When the user starts…
• CVE-2021-32499, published 2021-12-17. High severity, CVSS 7.5. EPSS: 0.8% chance of exploitation in the next 30 days. SICK SOPAS ET before version 4.8.0 allows attackers to manipulate the command line arguments to pass in any value to the Emulator executable.
• CVE-2021-32497, published 2021-12-17. High severity, CVSS 8.6. EPSS: 0.8% chance of exploitation in the next 30 days. SICK SOPAS ET before version 4.8.0 allows attackers to wrap any executable file into an SDD and provide this to a SOPAS ET user. When a user starts the emulator the executable is run without further…