Read the docs
TI-2020-09995 Aliases CVE-2020-12500GHSA-g459-4fqq-mr69

Pepperl+Fuchs improper authorization affects multiple Comtrol RocketLinx products

Priority MEDIUM 47CWE-306Published · Updated

Key facts

Attack vector
Network
Privileges required
None
User interaction
None
Attack complexity
Low
Impact type
Security bypass
Confidentiality · integrity · availability
High · High · High
Fix status
Fixed

Attack profile from CVSS 3.1 · CNA. Fix status from CNA. Impact type from CWE-306.

Summary

Improper Authorization vulnerability of Pepperl+Fuchs P+F Comtrol RocketLinx ES7510-XT, ES8509-XT, ES8510-XT, ES9528-XTv2, ES7506, ES7510, ES7528, ES8508, ES8508F, ES8510, ES8510-XTE, ES9528/ES9528-XT (all versions) allows unauthenticated device administration.

Why it matters now

EPSS 0.02885 86th percentileScored 2026-11-07
Public exploit Yes 3 exploit referencesTagged by NVD
Fix Fixed P+F Comtrol RocketLinx (Pepperl+Fuchs): 2.1.1, 3.1.1JetNet (Korenix): V1.6+1 more product

SSVC decision points

Not available: CISA has not published SSVC decision points for this record.

Affected products

VendorProductAffected versionsFixed inStatusSource
Pepperl+FuchsP+F Comtrol RocketLinxES8509-XT, ES8510-XT, ES9528-XTv2, ES7506, ES7510, ES7528, ES8508, ES8508F, ES8510-XTE, ES9528/ES9528-XT all; ES7510-XT to before 2.1.1; ES8510 to before 3.1.12.1.1, 3.1.1Patch availableCNA
KorenixJetNet5428G-20SFP – V1.0; 5810G – V1.1; 4706F – V2.3b; 4510 – V3.0b; 5310 to before V1.6V1.6Patch availableCNA
WestermoPMI-110-F2Gbefore V1.8V1.8Patch availableCNA
  • P+F Comtrol RocketLinx VendorPepperl+Fuchs Affected ES8509-XT, ES8510-XT, ES9528-XTv2, ES7506, ES7510, ES7528, ES8508, ES8508F, ES8510-XTE, ES9528/ES9528-XT all; ES7510-XT to before 2.1.1; ES8510 to before 3.1.1 Fixed in 2.1.1, 3.1.1 Patch available CNA
  • JetNet VendorKorenix Affected 5428G-20SFP – V1.0; 5810G – V1.1; 4706F – V2.3b; 4510 – V3.0b; 5310 to before V1.6 Fixed in V1.6 Patch available CNA
  • PMI-110-F2G VendorWestermo Affected before V1.8 Fixed in V1.8 Patch available CNA

CPE configurations NVD · 26

CPEVersionsRoleVendor
cpe:2.3:o:pepperl-fuchs:es7510-xt_firmware:*:*:*:*:*:*:*:*all versionsVulnerablePepperl+Fuchs
cpe:2.3:h:pepperl-fuchs:es7510-xt:-:*:*:*:*:*:*:*not specified by NVDRunning onPepperl+Fuchs
cpe:2.3:o:pepperl-fuchs:es8509-xt_firmware:*:*:*:*:*:*:*:*all versionsVulnerablePepperl+Fuchs
cpe:2.3:h:pepperl-fuchs:es8509-xt:-:*:*:*:*:*:*:*not specified by NVDRunning onPepperl+Fuchs
cpe:2.3:o:pepperl-fuchs:es8510-xt_firmware:*:*:*:*:*:*:*:*all versionsVulnerablePepperl+Fuchs
cpe:2.3:h:pepperl-fuchs:es8510-xt:-:*:*:*:*:*:*:*not specified by NVDRunning onPepperl+Fuchs
cpe:2.3:o:pepperl-fuchs:es9528-xtv2_firmware:*:*:*:*:*:*:*:*all versionsVulnerablePepperl+Fuchs
cpe:2.3:h:pepperl-fuchs:es9528-xtv2:-:*:*:*:*:*:*:*not specified by NVDRunning onPepperl+Fuchs
cpe:2.3:o:pepperl-fuchs:es7506_firmware:*:*:*:*:*:*:*:*all versionsVulnerablePepperl+Fuchs
cpe:2.3:h:pepperl-fuchs:es7506:-:*:*:*:*:*:*:*not specified by NVDRunning onPepperl+Fuchs
  • cpe:2.3:o:pepperl-fuchs:es7510-xt_firmware:*:*:*:*:*:*:*:* Versions all versions Vulnerable ·Pepperl+Fuchs
  • cpe:2.3:h:pepperl-fuchs:es7510-xt:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Pepperl+Fuchs
  • cpe:2.3:o:pepperl-fuchs:es8509-xt_firmware:*:*:*:*:*:*:*:* Versions all versions Vulnerable ·Pepperl+Fuchs
  • cpe:2.3:h:pepperl-fuchs:es8509-xt:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Pepperl+Fuchs
  • cpe:2.3:o:pepperl-fuchs:es8510-xt_firmware:*:*:*:*:*:*:*:* Versions all versions Vulnerable ·Pepperl+Fuchs
  • cpe:2.3:h:pepperl-fuchs:es8510-xt:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Pepperl+Fuchs
  • cpe:2.3:o:pepperl-fuchs:es9528-xtv2_firmware:*:*:*:*:*:*:*:* Versions all versions Vulnerable ·Pepperl+Fuchs
  • cpe:2.3:h:pepperl-fuchs:es9528-xtv2:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Pepperl+Fuchs
  • cpe:2.3:o:pepperl-fuchs:es7506_firmware:*:*:*:*:*:*:*:* Versions all versions Vulnerable ·Pepperl+Fuchs
  • cpe:2.3:h:pepperl-fuchs:es7506:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Pepperl+Fuchs
Show 16 more CPE
CPEVersionsRoleVendor
cpe:2.3:o:pepperl-fuchs:es7510_firmware:*:*:*:*:*:*:*:*all versionsVulnerablePepperl+Fuchs
cpe:2.3:h:pepperl-fuchs:es7510:-:*:*:*:*:*:*:*not specified by NVDRunning onPepperl+Fuchs
cpe:2.3:o:pepperl-fuchs:es7528_firmware:*:*:*:*:*:*:*:*all versionsVulnerablePepperl+Fuchs
cpe:2.3:h:pepperl-fuchs:es7528:-:*:*:*:*:*:*:*not specified by NVDRunning onPepperl+Fuchs
cpe:2.3:o:pepperl-fuchs:es8508_firmware:*:*:*:*:*:*:*:*all versionsVulnerablePepperl+Fuchs
cpe:2.3:h:pepperl-fuchs:es8508:-:*:*:*:*:*:*:*not specified by NVDRunning onPepperl+Fuchs
cpe:2.3:o:pepperl-fuchs:es8508f_firmware:*:*:*:*:*:*:*:*all versionsVulnerablePepperl+Fuchs
cpe:2.3:h:pepperl-fuchs:es8508f:-:*:*:*:*:*:*:*not specified by NVDRunning onPepperl+Fuchs
cpe:2.3:o:pepperl-fuchs:es8510_firmware:*:*:*:*:*:*:*:*all versionsVulnerablePepperl+Fuchs
cpe:2.3:h:pepperl-fuchs:es8510:-:*:*:*:*:*:*:*not specified by NVDRunning onPepperl+Fuchs
cpe:2.3:o:pepperl-fuchs:es8510-xte_firmware:*:*:*:*:*:*:*:*all versionsVulnerablePepperl+Fuchs
cpe:2.3:h:pepperl-fuchs:es8510-xte:-:*:*:*:*:*:*:*not specified by NVDRunning onPepperl+Fuchs
cpe:2.3:o:pepperl-fuchs:es9528_firmware:*:*:*:*:*:*:*:*all versionsVulnerablePepperl+Fuchs
cpe:2.3:h:pepperl-fuchs:es9528:-:*:*:*:*:*:*:*not specified by NVDRunning onPepperl+Fuchs
cpe:2.3:o:pepperl-fuchs:es9528-xt_firmware:*:*:*:*:*:*:*:*all versionsVulnerablePepperl+Fuchs
cpe:2.3:h:pepperl-fuchs:es9528-xt:-:*:*:*:*:*:*:*not specified by NVDRunning onPepperl+Fuchs
  • cpe:2.3:o:pepperl-fuchs:es7510_firmware:*:*:*:*:*:*:*:* Versions all versions Vulnerable ·Pepperl+Fuchs
  • cpe:2.3:h:pepperl-fuchs:es7510:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Pepperl+Fuchs
  • cpe:2.3:o:pepperl-fuchs:es7528_firmware:*:*:*:*:*:*:*:* Versions all versions Vulnerable ·Pepperl+Fuchs
  • cpe:2.3:h:pepperl-fuchs:es7528:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Pepperl+Fuchs
  • cpe:2.3:o:pepperl-fuchs:es8508_firmware:*:*:*:*:*:*:*:* Versions all versions Vulnerable ·Pepperl+Fuchs
  • cpe:2.3:h:pepperl-fuchs:es8508:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Pepperl+Fuchs
  • cpe:2.3:o:pepperl-fuchs:es8508f_firmware:*:*:*:*:*:*:*:* Versions all versions Vulnerable ·Pepperl+Fuchs
  • cpe:2.3:h:pepperl-fuchs:es8508f:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Pepperl+Fuchs
  • cpe:2.3:o:pepperl-fuchs:es8510_firmware:*:*:*:*:*:*:*:* Versions all versions Vulnerable ·Pepperl+Fuchs
  • cpe:2.3:h:pepperl-fuchs:es8510:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Pepperl+Fuchs
  • cpe:2.3:o:pepperl-fuchs:es8510-xte_firmware:*:*:*:*:*:*:*:* Versions all versions Vulnerable ·Pepperl+Fuchs
  • cpe:2.3:h:pepperl-fuchs:es8510-xte:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Pepperl+Fuchs
  • cpe:2.3:o:pepperl-fuchs:es9528_firmware:*:*:*:*:*:*:*:* Versions all versions Vulnerable ·Pepperl+Fuchs
  • cpe:2.3:h:pepperl-fuchs:es9528:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Pepperl+Fuchs
  • cpe:2.3:o:pepperl-fuchs:es9528-xt_firmware:*:*:*:*:*:*:*:* Versions all versions Vulnerable ·Pepperl+Fuchs
  • cpe:2.3:h:pepperl-fuchs:es9528-xt:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Pepperl+Fuchs

Remediation

  • Fix · CNA P+F Comtrol RocketLinx (Pepperl+Fuchs) Fixed in 2.1.1, 3.1.1
  • Fix · CNA JetNet (Korenix) Fixed in V1.6
  • Fix · CNA PMI-110-F2G (Westermo) Fixed in V1.8

Fixed in the same release

Records fixed by the same vendor advisory or release, as the CNA lists them.

  • Release ·

    Pepperl+Fuchs P+F Comtrol RocketLinx 2.1.1, 3.1.1

    5 records Highest priority Priority MEDIUM 5 MEDIUM

    Other records, highest priority first

    • TI-2020-09998 Pepperl+Fuchs improper authorization affects multiple Comtrol RocketLinx productsPriority MEDIUM 52
    • TI-2020-09999 Pepperl+Fuchs improper authorization affects multiple Comtrol RocketLinx productsPriority MEDIUM 48
    • TI-2020-09996 Pepperl+Fuchs improper authorization affects multiple Comtrol RocketLinx productsPriority MEDIUM 48
    Show all 5 records →
  • Release ·

    Westermo PMI-110-F2G V1.8

    5 records Highest priority Priority MEDIUM 5 MEDIUM

    Other records, highest priority first

    • TI-2020-09998 Pepperl+Fuchs improper authorization affects multiple Comtrol RocketLinx productsPriority MEDIUM 52
    • TI-2020-09999 Pepperl+Fuchs improper authorization affects multiple Comtrol RocketLinx productsPriority MEDIUM 48
    • TI-2020-09996 Pepperl+Fuchs improper authorization affects multiple Comtrol RocketLinx productsPriority MEDIUM 48
    Show all 5 records →
Show 1 more group
  • Release ·

    Korenix JetNet V1.6

    5 records Highest priority Priority MEDIUM 5 MEDIUM

    Other records, highest priority first

    • TI-2020-09998 Pepperl+Fuchs improper authorization affects multiple Comtrol RocketLinx productsPriority MEDIUM 52
    • TI-2020-09999 Pepperl+Fuchs improper authorization affects multiple Comtrol RocketLinx productsPriority MEDIUM 48
    • TI-2020-09996 Pepperl+Fuchs improper authorization affects multiple Comtrol RocketLinx productsPriority MEDIUM 48
    Show all 5 records →

Timeline

  1. 2026-10-02 Threatist record created from CVE-2020-12500
  2. 2026-10-03 Alias added: GHSA-g459-4fqq-mr69

References

Exploit 3

Advisory 2

  • TI-2020-09998 Pepperl+Fuchs improper authorization affects multiple Comtrol RocketLinx products CVSS 3.1HIGH 7.2
  • TI-2020-09999 Pepperl+Fuchs improper authorization affects multiple Comtrol RocketLinx products CVSS 3.1CRITICAL 9.8
  • TI-2020-09996 Pepperl+Fuchs improper authorization affects multiple Comtrol RocketLinx products CVSS 3.1CRITICAL 9.8
  • TI-2020-09997 Pepperl+Fuchs improper authorization affects multiple Comtrol RocketLinx products CVSS 3.1HIGH 8.8

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences