Skip to content
CVE PROGRAM SOURCE RECORD9.8 Critical

CVE-2020-12504

Pepperl+Fuchs improper authorization affects multiple Comtrol RocketLinx products

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
CERTVDE

Description

Improper Authorization vulnerability of Pepperl+Fuchs P+F Comtrol RocketLinx ES7510-XT, ES8509-XT, ES8510-XT, ES9528-XTv2, ES7506, ES7510, ES7528, ES8508, ES8508F, ES8510, ES8510-XTE, ES9528/ES9528-XT (all versions) and ICRL-M-8RJ45/4SFP-G-DIN, ICRL-M-16RJ45/4CP-G-DIN FW 1.2.3 and below has an active TFTP-Service.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Pepperl+Fuchs P+F Comtrol RocketLinx

  • ES8509-XT, ES8510-XT, ES9528-XTv2, ES7506, ES7510, ES7528, ES8508, ES8508F, ES8510-XTE, ES9528/ES9528-XT allaffected
  • ES7510-XT to < 2.1.1affected
  • ES8510 to < 3.1.1affected

Pepperl+Fuchs P+F Comtrol RocketLinx

  • ICRL-M-8RJ45/4SFP-G-DIN to ≤ 1.2.3affected
  • ICRL-M-16RJ45/4CP-G-DIN to ≤ 1.2.3affected

Korenix JetNet

  • 5428G-20SFP to ≤ V1.0affected
  • 5810G to ≤ V1.1affected
  • 4706F to ≤ V2.3baffected
  • 4510 to ≤ V3.0baffected
  • 5310 to < V1.6affected

Westermo PMI-110-F2G

  • unspecified to < V1.8affected

References