CVE-2020-12042

Opto 22 SoftPAC Project Version 9.6 and prior. Paths specified within the zip files used to update the SoftPAC firmware are not sanitized. As a result, an attacker with user privileges can gain arbitrary file write access with system access.

• CWE-347
• CWE-347

• https://www.us-cert.gov/ics/advisories/icsa-20-135-01Third Party Advisory, US Government Resource
• https://www.us-cert.gov/ics/advisories/icsa-20-135-01Third Party Advisory, US Government Resource

Published

May 14, 2020

Last Modified

Jun 17, 2026

Status

Modified

• Same Subject, Wrong User: A Cross-Issuer Account Takeover in n8nStrix found an identity-binding bug in n8n's token-exchange flow enabling account takeover.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2020-12037Baxter PrismaFlex all versions, PrisMax all versions prior t…7.5
• CVE-2020-12038Products that use EDS Subsystem: Version 28.0.1 and prior (F…5.5
• CVE-2020-12039Baxter Sigma Spectrum Infusion Pumps Sigma Spectrum Infusion…2.4
• CVE-2020-1204An elevation of privilege vulnerability exists when Windows …7.1
• CVE-2020-12040Sigma Spectrum Infusion System v's6.x (model 35700BAX) and B…9.8
• CVE-2020-12041The Baxter Spectrum WBM (v17, v20D29, v20D30, v20D31, and v2…9.4
• CVE-2020-12043The Baxter Spectrum WBM (v17, v20D29, v20D30, v20D31, and v2…9.8
• CVE-2020-12045The Baxter Spectrum WBM (v17, v20D29, v20D30, v20D31, and v2…9.8
• CVE-2020-12046Opto 22 SoftPAC Project Version 9.6 and prior. SoftPAC’s fir…5.7
• CVE-2020-12047The Baxter Spectrum WBM (v17, v20D29, v20D30, v20D31, and v2…9.8
• CVE-2020-12048Phoenix Hemodialysis Delivery System SW 3.36 and 3.40, The P…7.5
• CVE-2020-12049An issue was discovered in dbus >= 1.3.0 before 1.12.18. The…5.5