CVE-2020-12502
Pepperl+Fuchs improper authorization affects multiple Comtrol RocketLinx products
- Published
- Last modified
- Where the record stands: published, rejected by its publisher, or superseded by another id.What do these mean? →
- published
- Whether CISA lists it in its Known Exploited Vulnerabilities catalog: proof that attackers are using it.What do these mean? →
- Not listed in CISA KEV
- Fix
- Fixed in 2.1.1, 3.1.1, V1.6, V1.8
- Whether working attack code is public (Exploit-DB, Metasploit, Nuclei or GitHub). Public code makes attacks easier.What do these mean? →
- None on Exploit-DB, Metasploit or GitHub
Summary
Improper Authorization vulnerability of Pepperl+Fuchs P+F Comtrol RocketLinx ES7510-XT, ES8509-XT, ES8510-XT, ES9528-XTv2, ES7506, ES7510, ES7528, ES8508, ES8508F, ES8510, ES8510-XTE, ES9528/ES9528-XT (all versions) and ICRL-M-8RJ45/4SFP-G-DIN, ICRL-M-16RJ45/4CP-G-DIN FW 1.2.3 and below is prone to unauthenticated device administration.
Timeline
- CVE published
- Record last updated
Affected versions
- Pepperl+Fuchs P+F Comtrol RocketLinx
From ES7510-XT · fixed in 2.1.1; From ES8510 · fixed in 3.1.1
- Pepperl+Fuchs P+F Comtrol RocketLinx
From ICRL-M-8RJ45/4SFP-G-DIN · through 1.2.3; From ICRL-M-16RJ45/4CP-G-DIN · through 1.2.3
- Korenix JetNet
From 5428G-20SFP · through V1.0; From 5810G · through V1.1; From 4706F · through V2.3b; From 4510 · through V3.0b; From 5310 · fixed in V1.6
- Westermo PMI-110-F2G
fixed in V1.8