CVE-2020-10612

Name: CVE-2020-10612
Creator: NVD / NIST
Published: 2020-05-14T21:15:12.853+00:00
License: https://creativecommons.org/publicdomain/zero/1.0/

CRITICALCVSS 9.1/10EPSS 1.07%

Last modified Jun 17, 2026

CVE-2020-10612 is a critical-severity vulnerability rated 9.1/10 on the CVSS scale. Opto 22 SoftPAC Project Version 9.6 and prior. SoftPACAgent communicates with SoftPACMonitor over network Port 22000. EPSS estimates a 1.07% chance of exploitation in the next 30 days.

Description

Opto 22 SoftPAC Project Version 9.6 and prior. SoftPACAgent communicates with SoftPACMonitor over network Port 22000. However, this port is open without any restrictions. This allows an attacker with network access to control the SoftPACAgent service including updating SoftPAC firmware, starting or stopping service, or writing to certain registry values.

Metrics

CVSS 3.1

9.1/10

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H

EPSS Probability

1.07%

60.7th percentile

Probability of exploitation in the next 30 days. Learn more

Weakness Enumeration

Affected Software

Vendor	Product	Versions
Opto22	Softpac Project	<= 9.6

References

https://www.us-cert.gov/ics/advisories/icsa-20-135-01Third Party Advisory, US Government Resource
https://www.us-cert.gov/ics/advisories/icsa-20-135-01Third Party Advisory, US Government Resource

Timeline

Published: May 14, 2020
Last Modified: Jun 17, 2026
Status: Modified

Frequently Asked Questions

What is CVE-2020-10612?

How severe is CVE-2020-10612?

CVE-2020-10612 has a CVSS score of 9.1/10 (CRITICAL severity). The EPSS model estimates a 1.07% probability of exploitation in the next 30 days.

How do I fix CVE-2020-10612?

Check the vendor references and advisories linked above for patched versions and mitigation guidance. You can also run a Strix scan to test if your systems are affected.

Are you affected by CVE-2020-10612?

Run a free Strix scan to check your systems for this vulnerability.

Scan your code now

Source: NVD / NIST