7.2
High
CVE-2020-12503 Improper Authorization vulnerability of Pepperl+Fuchs P+F Comtrol RocketLinx ES7510-XT, ES8509-XT, ES8510-XT,…
Description
Improper Authorization vulnerability of Pepperl+Fuchs P+F Comtrol RocketLinx ES7510-XT, ES8509-XT, ES8510-XT, ES9528-XTv2, ES7506, ES7510, ES7528, ES8508, ES8508F, ES8510, ES8510-XTE, ES9528/ES9528-XT (all versions) and ICRL-M-8RJ45/4SFP-G-DIN, ICRL-M-16RJ45/4CP-G-DIN FW 1.2.3 and below is prone to multiple authenticated command injections.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| P+F Comtrol RocketLinx 1.2 | earliest → 1.2.3 | No fix stated |
| JetNet 5810 | 5810G → 1.1 | No fix stated |
| JetNet 5428 | 5428G-20SFP → 1.0 | No fix stated |
| JetNet 4706 | 4706F → 2.3b | No fix stated |
| JetNet 4510 | 4510 → 3.0b | No fix stated |
| JetNet 1.6 | earliest → < 1.6 | 1.6 |
| PMI-110-F2G 1.8 | earliest → < 1.8 | 1.8 |
Other CVEs of P+F Comtrol RocketLinx
The 5 CVEs of P+F Comtrol RocketLinx →
CVE-2020-12504
Improper Authorization vulnerability of Pepperl+Fuchs P+F Comtrol RocketLinx ES7510-XT, ES8509-XT, ES8510-XT,…
9.8
Critical
CVE-2020-12502
Improper Authorization vulnerability of Pepperl+Fuchs P+F Comtrol RocketLinx ES7510-XT, ES8509-XT, ES8510-XT,…
8.8
High
CVE-2020-12501
Improper Authorization vulnerability of Pepperl+Fuchs P+F Comtrol RocketLinx ES7510-XT, ES8509-XT, ES8510-XT,…
9.8
Critical
CVE-2020-12500
Improper Authorization vulnerability of Pepperl+Fuchs P+F Comtrol RocketLinx ES7510-XT, ES8509-XT, ES8510-XT,…
9.8
Critical