Skip to content
9.8 Critical

CVE-2020-12501 Improper Authorization vulnerability of Pepperl+Fuchs P+F Comtrol RocketLinx ES7510-XT, ES8509-XT, ES8510-XT,…

Description

Improper Authorization vulnerability of Pepperl+Fuchs P+F Comtrol RocketLinx ES7510-XT, ES8509-XT, ES8510-XT, ES9528-XTv2, ES7506, ES7510, ES7528, ES8508, ES8508F, ES8510, ES8510-XTE, ES9528/ES9528-XT (all versions) use undocumented accounts.

Affected products and versions

Product Affected versions Fixed in
P+F Comtrol RocketLinx 3.1 earliest → < 3.1.1 3.1.1
P+F Comtrol RocketLinx 2.1 earliest → < 2.1.1 2.1.1
JetNet 5810 5810G → 1.1 No fix stated
JetNet 5428 5428G-20SFP → 1.0 No fix stated
JetNet 4706 4706F → 2.3b No fix stated
JetNet 4510 4510 → 3.0b No fix stated
JetNet 1.6 earliest → < 1.6 1.6
PMI-110-F2G 1.8 earliest → < 1.8 1.8
The 5 CVEs of P+F Comtrol RocketLinx →
Track this CVE