8.8
Élevée
CVE-2020-12517 On Phoenix Contact PLCnext Control Devices versions before 2021.0 LTS an authenticated low privileged user could embed…
Description
On Phoenix Contact PLCnext Control Devices versions before 2021.0 LTS an authenticated low privileged user could embed malicious Javascript code to gain admin rights when the admin user visits the vulnerable website (local privilege escalation).
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| AXC F 1152 (1151412) | Versions non publiées | |
| AXC F 2152 (2404267) | Versions non publiées | |
| AXC F 3152 (1069208) | Versions non publiées | |
| RFC 4072S (1051328 | Versions non publiées | |
| AXC F 2152 Starterkit (1046568) | Versions non publiées | |
| PLCnext Technology Starterkit (1188165) | Versions non publiées |
Autres CVE de AXC F 1152 (1151412)
Les 4 CVE de AXC F 1152 (1151412) →
CVE-2020-12518
On Phoenix Contact PLCnext Control Devices versions before 2021.0 LTS an attacker can use the knowledge gained by…
5.5
Moyenne
CVE-2020-12519
On Phoenix Contact PLCnext Control Devices versions before 2021.0 LTS an attacker can use this vulnerability i.e
8.8
Élevée
CVE-2020-12521
On Phoenix Contact PLCnext Control Devices versions before 2021.0 LTS a specially crafted LLDP packet may lead to a high…
6.5
Moyenne