5.5
Medium
CVE-2020-12518 On Phoenix Contact PLCnext Control Devices versions before 2021.0 LTS an attacker can use the knowledge gained by…
Description
On Phoenix Contact PLCnext Control Devices versions before 2021.0 LTS an attacker can use the knowledge gained by reading the insufficiently protected sensitive information to plan further attacks.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| AXC F 1152 (1151412) | Versions not published | |
| AXC F 2152 (2404267) | Versions not published | |
| AXC F 3152 (1069208) | Versions not published | |
| RFC 4072S (1051328 | Versions not published | |
| AXC F 2152 Starterkit (1046568) | Versions not published | |
| PLCnext Technology Starterkit (1188165) | Versions not published |
Other CVEs of AXC F 1152 (1151412)
The 4 CVEs of AXC F 1152 (1151412) →
CVE-2020-12517
On Phoenix Contact PLCnext Control Devices versions before 2021.0 LTS an authenticated low privileged user could embed…
8.8
High
CVE-2020-12519
On Phoenix Contact PLCnext Control Devices versions before 2021.0 LTS an attacker can use this vulnerability i.e
8.8
High
CVE-2020-12521
On Phoenix Contact PLCnext Control Devices versions before 2021.0 LTS a specially crafted LLDP packet may lead to a high…
6.5
Medium