Skip to content
Sign in
8.8 High

CVE-2020-12517 On Phoenix Contact PLCnext Control Devices versions before 2021.0 LTS an authenticated low privileged user could embed…

Description

On Phoenix Contact PLCnext Control Devices versions before 2021.0 LTS an authenticated low privileged user could embed malicious Javascript code to gain admin rights when the admin user visits the vulnerable website (local privilege escalation).

Affected products and versions

Product Affected versions Fixed in
AXC F 1152 (1151412) Versions not published
AXC F 2152 (2404267) Versions not published
AXC F 3152 (1069208) Versions not published
RFC 4072S (1051328 Versions not published
AXC F 2152 Starterkit (1046568) Versions not published
PLCnext Technology Starterkit (1188165) Versions not published

Other CVEs of AXC F 1152 (1151412)

The 4 CVEs of AXC F 1152 (1151412) →
CVE-2020-12518 On Phoenix Contact PLCnext Control Devices versions before 2021.0 LTS an attacker can use the knowledge gained by… 5.5 Medium CVE-2020-12519 On Phoenix Contact PLCnext Control Devices versions before 2021.0 LTS an attacker can use this vulnerability i.e 8.8 High CVE-2020-12521 On Phoenix Contact PLCnext Control Devices versions before 2021.0 LTS a specially crafted LLDP packet may lead to a high… 6.5 Medium
Track this CVE