Skip to content
CVE PROGRAM SOURCE RECORD7.2 High

CVE-2020-12503

Pepperl+Fuchs improper authorization affects multiple Comtrol RocketLinx products

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
CERTVDE

Description

Improper Authorization vulnerability of Pepperl+Fuchs P+F Comtrol RocketLinx ES7510-XT, ES8509-XT, ES8510-XT, ES9528-XTv2, ES7506, ES7510, ES7528, ES8508, ES8508F, ES8510, ES8510-XTE, ES9528/ES9528-XT (all versions) and ICRL-M-8RJ45/4SFP-G-DIN, ICRL-M-16RJ45/4CP-G-DIN FW 1.2.3 and below is prone to multiple authenticated command injections.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Pepperl+Fuchs P+F Comtrol RocketLinx

  • ES8509-XT, ES8510-XT, ES9528-XTv2, ES7506, ES7510, ES7528, ES8508, ES8508F, ES8510-XTE, ES9528/ES9528-XT allaffected
  • ES7510-XT to < 2.1.1affected
  • ES8510 to < 3.1.1affected

Pepperl+Fuchs P+F Comtrol RocketLinx

  • ICRL-M-8RJ45/4SFP-G-DIN to ≤ 1.2.3affected
  • ICRL-M-16RJ45/4CP-G-DIN to ≤ 1.2.3affected

Korenix JetNet

  • 5428G-20SFP to ≤ V1.0affected
  • 5810G to ≤ V1.1affected
  • 4706F to ≤ V2.3baffected
  • 4510 to ≤ V3.0baffected
  • 5310 to < V1.6affected

Westermo PMI-110-F2G

  • unspecified to < V1.8affected

References