Pepperl+Fuchs improper authorization affects multiple Comtrol RocketLinx products
Priority MEDIUM 52CWE-863Published · Updated
Key facts
- Attack vector
- Network
- Privileges required
- High
- User interaction
- None
- Attack complexity
- Low
- Impact type
- Security bypass
- Confidentiality · integrity · availability
- High · High · High
- Fix status
- Fixed
Attack profile from CVSS 3.1 · CNA. Fix status from CNA. Impact type from CWE-863.
Summary
Improper Authorization vulnerability of Pepperl+Fuchs P+F Comtrol RocketLinx ES7510-XT, ES8509-XT, ES8510-XT, ES9528-XTv2, ES7506, ES7510, ES7528, ES8508, ES8508F, ES8510, ES8510-XTE, ES9528/ES9528-XT (all versions) and ICRL-M-8RJ45/4SFP-G-DIN, ICRL-M-16RJ45/4CP-G-DIN FW 1.2.3 and below is prone to multiple authenticated command injections.
Why it matters now
EPSS 0.22828 97th percentileScored 2026-11-07
Public exploit Yes 2 exploit referencesTagged by NVD
Fix Fixed P+F Comtrol RocketLinx (Pepperl+Fuchs): 2.1.1, 3.1.1JetNet (Korenix): V1.6+1 more product
SSVC decision points
Not available: CISA has not published SSVC decision points for this record.
Affected products
| Vendor | Product | Affected versions | Fixed in | Status | Source |
|---|---|---|---|---|---|
| Pepperl+Fuchs | P+F Comtrol RocketLinx | ES8509-XT, ES8510-XT, ES9528-XTv2, ES7506, ES7510, ES7528, ES8508, ES8508F, ES8510-XTE, ES9528/ES9528-XT all; ES7510-XT to before 2.1.1; ES8510 to before 3.1.1 | 2.1.1, 3.1.1 | Patch available | CNA |
| Pepperl+Fuchs | P+F Comtrol RocketLinx | ICRL-M-8RJ45/4SFP-G-DIN – 1.2.3; ICRL-M-16RJ45/4CP-G-DIN – 1.2.3 | — | No fix listed | CNA |
| Korenix | JetNet | 5428G-20SFP – V1.0; 5810G – V1.1; 4706F – V2.3b; 4510 – V3.0b; 5310 to before V1.6 | V1.6 | Patch available | CNA |
| Westermo | PMI-110-F2G | before V1.8 | V1.8 | Patch available | CNA |
- P+F Comtrol RocketLinx VendorPepperl+Fuchs Affected ES8509-XT, ES8510-XT, ES9528-XTv2, ES7506, ES7510, ES7528, ES8508, ES8508F, ES8510-XTE, ES9528/ES9528-XT all; ES7510-XT to before 2.1.1; ES8510 to before 3.1.1 Fixed in 2.1.1, 3.1.1 Patch available CNA
- P+F Comtrol RocketLinx VendorPepperl+Fuchs Affected ICRL-M-8RJ45/4SFP-G-DIN – 1.2.3; ICRL-M-16RJ45/4CP-G-DIN – 1.2.3 Fixed in — No fix listed CNA
- JetNet VendorKorenix Affected 5428G-20SFP – V1.0; 5810G – V1.1; 4706F – V2.3b; 4510 – V3.0b; 5310 to before V1.6 Fixed in V1.6 Patch available CNA
- PMI-110-F2G VendorWestermo Affected before V1.8 Fixed in V1.8 Patch available CNA
CPE configurations NVD · 58
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:o:pepperl-fuchs:es7510-xt_firmware:*:*:*:*:*:*:*:* | all versions | Vulnerable | Pepperl+Fuchs |
| cpe:2.3:h:pepperl-fuchs:es7510-xt:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Pepperl+Fuchs |
| cpe:2.3:o:pepperl-fuchs:es8509-xt_firmware:*:*:*:*:*:*:*:* | all versions | Vulnerable | Pepperl+Fuchs |
| cpe:2.3:h:pepperl-fuchs:es8509-xt:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Pepperl+Fuchs |
| cpe:2.3:o:pepperl-fuchs:es8510-xt_firmware:*:*:*:*:*:*:*:* | all versions | Vulnerable | Pepperl+Fuchs |
| cpe:2.3:h:pepperl-fuchs:es8510-xt:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Pepperl+Fuchs |
| cpe:2.3:o:pepperl-fuchs:es9528-xtv2_firmware:*:*:*:*:*:*:*:* | all versions | Vulnerable | Pepperl+Fuchs |
| cpe:2.3:h:pepperl-fuchs:es9528-xtv2:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Pepperl+Fuchs |
| cpe:2.3:o:pepperl-fuchs:es7506_firmware:*:*:*:*:*:*:*:* | all versions | Vulnerable | Pepperl+Fuchs |
| cpe:2.3:h:pepperl-fuchs:es7506:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Pepperl+Fuchs |
- cpe:2.3:o:pepperl-fuchs:es7510-xt_firmware:*:*:*:*:*:*:*:* Versions all versions Vulnerable ·Pepperl+Fuchs
- cpe:2.3:h:pepperl-fuchs:es7510-xt:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Pepperl+Fuchs
- cpe:2.3:o:pepperl-fuchs:es8509-xt_firmware:*:*:*:*:*:*:*:* Versions all versions Vulnerable ·Pepperl+Fuchs
- cpe:2.3:h:pepperl-fuchs:es8509-xt:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Pepperl+Fuchs
- cpe:2.3:o:pepperl-fuchs:es8510-xt_firmware:*:*:*:*:*:*:*:* Versions all versions Vulnerable ·Pepperl+Fuchs
- cpe:2.3:h:pepperl-fuchs:es8510-xt:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Pepperl+Fuchs
- cpe:2.3:o:pepperl-fuchs:es9528-xtv2_firmware:*:*:*:*:*:*:*:* Versions all versions Vulnerable ·Pepperl+Fuchs
- cpe:2.3:h:pepperl-fuchs:es9528-xtv2:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Pepperl+Fuchs
- cpe:2.3:o:pepperl-fuchs:es7506_firmware:*:*:*:*:*:*:*:* Versions all versions Vulnerable ·Pepperl+Fuchs
- cpe:2.3:h:pepperl-fuchs:es7506:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Pepperl+Fuchs
Show 48 more CPE
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:o:pepperl-fuchs:es7510_firmware:*:*:*:*:*:*:*:* | all versions | Vulnerable | Pepperl+Fuchs |
| cpe:2.3:h:pepperl-fuchs:es7510:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Pepperl+Fuchs |
| cpe:2.3:o:pepperl-fuchs:es7528_firmware:*:*:*:*:*:*:*:* | all versions | Vulnerable | Pepperl+Fuchs |
| cpe:2.3:h:pepperl-fuchs:es7528:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Pepperl+Fuchs |
| cpe:2.3:o:pepperl-fuchs:es8508_firmware:*:*:*:*:*:*:*:* | all versions | Vulnerable | Pepperl+Fuchs |
| cpe:2.3:h:pepperl-fuchs:es8508:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Pepperl+Fuchs |
| cpe:2.3:o:pepperl-fuchs:es8508f_firmware:*:*:*:*:*:*:*:* | all versions | Vulnerable | Pepperl+Fuchs |
| cpe:2.3:h:pepperl-fuchs:es8508f:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Pepperl+Fuchs |
| cpe:2.3:o:pepperl-fuchs:es8510_firmware:*:*:*:*:*:*:*:* | all versions | Vulnerable | Pepperl+Fuchs |
| cpe:2.3:h:pepperl-fuchs:es8510:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Pepperl+Fuchs |
| cpe:2.3:o:pepperl-fuchs:es8510-xte_firmware:*:*:*:*:*:*:*:* | all versions | Vulnerable | Pepperl+Fuchs |
| cpe:2.3:h:pepperl-fuchs:es8510-xte:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Pepperl+Fuchs |
| cpe:2.3:o:pepperl-fuchs:es9528_firmware:*:*:*:*:*:*:*:* | all versions | Vulnerable | Pepperl+Fuchs |
| cpe:2.3:h:pepperl-fuchs:es9528:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Pepperl+Fuchs |
| cpe:2.3:o:pepperl-fuchs:es9528-xt_firmware:*:*:*:*:*:*:*:* | all versions | Vulnerable | Pepperl+Fuchs |
| cpe:2.3:h:pepperl-fuchs:es9528-xt:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Pepperl+Fuchs |
| cpe:2.3:o:pepperl-fuchs:icrl-m-8rj45\/4sfp-g-din_firmware:*:*:*:*:*:*:*:* | up to 1.3.1 | Vulnerable | Pepperl+Fuchs |
| cpe:2.3:h:pepperl-fuchs:icrl-m-8rj45\/4sfp-g-din:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Pepperl+Fuchs |
| cpe:2.3:o:pepperl-fuchs:icrl-m-16rj45\/4cp-g-din_firmware:*:*:*:*:*:*:*:* | up to 1.3.1 | Vulnerable | Pepperl+Fuchs |
| cpe:2.3:h:pepperl-fuchs:icrl-m-16rj45\/4cp-g-din:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Pepperl+Fuchs |
| cpe:2.3:o:korenix:jetnet_5428g-20sfp_firmware:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | Korenix |
| cpe:2.3:h:korenix:jetnet_5428g-20sfp:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Korenix |
| cpe:2.3:o:korenix:jetnet_5810g_firmware:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | Korenix |
| cpe:2.3:h:korenix:jetnet_5810g:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Korenix |
| cpe:2.3:o:korenix:jetnet_4706f_firmware:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | Korenix |
| cpe:2.3:h:korenix:jetnet_4706f:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Korenix |
| cpe:2.3:o:korenix:jetnet_4706_firmware:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | Korenix |
| cpe:2.3:h:korenix:jetnet_4706:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Korenix |
| cpe:2.3:o:korenix:jetnet_4510_firmware:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | Korenix |
| cpe:2.3:h:korenix:jetnet_4510:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Korenix |
| cpe:2.3:o:korenix:jetnet_5010_firmware:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | Korenix |
| cpe:2.3:h:korenix:jetnet_5010:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Korenix |
| cpe:2.3:o:korenix:jetnet_5310_firmware:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | Korenix |
| cpe:2.3:h:korenix:jetnet_5310:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Korenix |
| cpe:2.3:o:korenix:jetnet_6095_firmware:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | Korenix |
| cpe:2.3:h:korenix:jetnet_6095:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Korenix |
| cpe:2.3:o:pepperl-fuchs:icrl-m-16rj45\/4cp-g-din_firmware:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | Pepperl+Fuchs |
| cpe:2.3:o:pepperl-fuchs:icrl-m-8rj45\/4sfp-g-din_firmware:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | Pepperl+Fuchs |
| cpe:2.3:o:korenix:jetwave_2212x_firmware:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | Korenix |
| cpe:2.3:h:korenix:jetwave_2212x:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Korenix |
| cpe:2.3:o:korenix:jetwave_2212s_firmware:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | Korenix |
| cpe:2.3:h:korenix:jetwave_2212s:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Korenix |
| cpe:2.3:o:korenix:jetwave_2212g_firmware:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | Korenix |
| cpe:2.3:h:korenix:jetwave_2212g:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Korenix |
| cpe:2.3:o:korenix:jetwave_2311_firmware:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | Korenix |
| cpe:2.3:h:korenix:jetwave_2311:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Korenix |
| cpe:2.3:o:korenix:jetwave_3220_firmware:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | Korenix |
| cpe:2.3:h:korenix:jetwave_3220:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Korenix |
- cpe:2.3:o:pepperl-fuchs:es7510_firmware:*:*:*:*:*:*:*:* Versions all versions Vulnerable ·Pepperl+Fuchs
- cpe:2.3:h:pepperl-fuchs:es7510:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Pepperl+Fuchs
- cpe:2.3:o:pepperl-fuchs:es7528_firmware:*:*:*:*:*:*:*:* Versions all versions Vulnerable ·Pepperl+Fuchs
- cpe:2.3:h:pepperl-fuchs:es7528:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Pepperl+Fuchs
- cpe:2.3:o:pepperl-fuchs:es8508_firmware:*:*:*:*:*:*:*:* Versions all versions Vulnerable ·Pepperl+Fuchs
- cpe:2.3:h:pepperl-fuchs:es8508:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Pepperl+Fuchs
- cpe:2.3:o:pepperl-fuchs:es8508f_firmware:*:*:*:*:*:*:*:* Versions all versions Vulnerable ·Pepperl+Fuchs
- cpe:2.3:h:pepperl-fuchs:es8508f:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Pepperl+Fuchs
- cpe:2.3:o:pepperl-fuchs:es8510_firmware:*:*:*:*:*:*:*:* Versions all versions Vulnerable ·Pepperl+Fuchs
- cpe:2.3:h:pepperl-fuchs:es8510:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Pepperl+Fuchs
- cpe:2.3:o:pepperl-fuchs:es8510-xte_firmware:*:*:*:*:*:*:*:* Versions all versions Vulnerable ·Pepperl+Fuchs
- cpe:2.3:h:pepperl-fuchs:es8510-xte:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Pepperl+Fuchs
- cpe:2.3:o:pepperl-fuchs:es9528_firmware:*:*:*:*:*:*:*:* Versions all versions Vulnerable ·Pepperl+Fuchs
- cpe:2.3:h:pepperl-fuchs:es9528:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Pepperl+Fuchs
- cpe:2.3:o:pepperl-fuchs:es9528-xt_firmware:*:*:*:*:*:*:*:* Versions all versions Vulnerable ·Pepperl+Fuchs
- cpe:2.3:h:pepperl-fuchs:es9528-xt:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Pepperl+Fuchs
- cpe:2.3:o:pepperl-fuchs:icrl-m-8rj45\/4sfp-g-din_firmware:*:*:*:*:*:*:*:* Versions up to 1.3.1 Vulnerable ·Pepperl+Fuchs
- cpe:2.3:h:pepperl-fuchs:icrl-m-8rj45\/4sfp-g-din:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Pepperl+Fuchs
- cpe:2.3:o:pepperl-fuchs:icrl-m-16rj45\/4cp-g-din_firmware:*:*:*:*:*:*:*:* Versions up to 1.3.1 Vulnerable ·Pepperl+Fuchs
- cpe:2.3:h:pepperl-fuchs:icrl-m-16rj45\/4cp-g-din:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Pepperl+Fuchs
- cpe:2.3:o:korenix:jetnet_5428g-20sfp_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Korenix
- cpe:2.3:h:korenix:jetnet_5428g-20sfp:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Korenix
- cpe:2.3:o:korenix:jetnet_5810g_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Korenix
- cpe:2.3:h:korenix:jetnet_5810g:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Korenix
- cpe:2.3:o:korenix:jetnet_4706f_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Korenix
- cpe:2.3:h:korenix:jetnet_4706f:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Korenix
- cpe:2.3:o:korenix:jetnet_4706_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Korenix
- cpe:2.3:h:korenix:jetnet_4706:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Korenix
- cpe:2.3:o:korenix:jetnet_4510_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Korenix
- cpe:2.3:h:korenix:jetnet_4510:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Korenix
- cpe:2.3:o:korenix:jetnet_5010_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Korenix
- cpe:2.3:h:korenix:jetnet_5010:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Korenix
- cpe:2.3:o:korenix:jetnet_5310_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Korenix
- cpe:2.3:h:korenix:jetnet_5310:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Korenix
- cpe:2.3:o:korenix:jetnet_6095_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Korenix
- cpe:2.3:h:korenix:jetnet_6095:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Korenix
- cpe:2.3:o:pepperl-fuchs:icrl-m-16rj45\/4cp-g-din_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Pepperl+Fuchs
- cpe:2.3:o:pepperl-fuchs:icrl-m-8rj45\/4sfp-g-din_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Pepperl+Fuchs
- cpe:2.3:o:korenix:jetwave_2212x_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Korenix
- cpe:2.3:h:korenix:jetwave_2212x:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Korenix
- cpe:2.3:o:korenix:jetwave_2212s_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Korenix
- cpe:2.3:h:korenix:jetwave_2212s:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Korenix
- cpe:2.3:o:korenix:jetwave_2212g_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Korenix
- cpe:2.3:h:korenix:jetwave_2212g:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Korenix
- cpe:2.3:o:korenix:jetwave_2311_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Korenix
- cpe:2.3:h:korenix:jetwave_2311:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Korenix
- cpe:2.3:o:korenix:jetwave_3220_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Korenix
- cpe:2.3:h:korenix:jetwave_3220:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Korenix
Remediation
- Fix · CNA P+F Comtrol RocketLinx (Pepperl+Fuchs) Fixed in 2.1.1, 3.1.1
- Fix · CNA JetNet (Korenix) Fixed in V1.6
- Fix · CNA PMI-110-F2G (Westermo) Fixed in V1.8
Fixed in the same release
Records fixed by the same vendor advisory or release, as the CNA lists them.
- Release ·
Pepperl+Fuchs P+F Comtrol RocketLinx 2.1.1, 3.1.1
5 records Highest priority Priority MEDIUM 5 MEDIUM
Other records, highest priority first
- TI-2020-09999 Pepperl+Fuchs improper authorization affects multiple Comtrol RocketLinx productsPriority MEDIUM 48
- TI-2020-09996 Pepperl+Fuchs improper authorization affects multiple Comtrol RocketLinx productsPriority MEDIUM 48
- TI-2020-09995 Pepperl+Fuchs improper authorization affects multiple Comtrol RocketLinx productsPriority MEDIUM 47
- Release ·
Westermo PMI-110-F2G V1.8
5 records Highest priority Priority MEDIUM 5 MEDIUM
Other records, highest priority first
- TI-2020-09999 Pepperl+Fuchs improper authorization affects multiple Comtrol RocketLinx productsPriority MEDIUM 48
- TI-2020-09996 Pepperl+Fuchs improper authorization affects multiple Comtrol RocketLinx productsPriority MEDIUM 48
- TI-2020-09995 Pepperl+Fuchs improper authorization affects multiple Comtrol RocketLinx productsPriority MEDIUM 47
Show 1 more group
- Release ·
Korenix JetNet V1.6
5 records Highest priority Priority MEDIUM 5 MEDIUM
Other records, highest priority first
- TI-2020-09999 Pepperl+Fuchs improper authorization affects multiple Comtrol RocketLinx productsPriority MEDIUM 48
- TI-2020-09996 Pepperl+Fuchs improper authorization affects multiple Comtrol RocketLinx productsPriority MEDIUM 48
- TI-2020-09995 Pepperl+Fuchs improper authorization affects multiple Comtrol RocketLinx productsPriority MEDIUM 47
Timeline
- 2026-10-02 Threatist record created from CVE-2020-12503
- 2026-10-03 Alias added: GHSA-vgv9-c2qw-673g
References
Exploit 2
Advisory 4
- https://cert.vde.com/de-de/advisories/vde-2020-040
- 20210601 SEC Consult SA-20210601-0 :: Multiple critical vulnerabilities in Korenix Technology JetNet Series
- https://sec-consult.com/vulnerability-lab/advisory/multiple-critical-vulnerabilities-in-korenix-technology-westermo-pepperl-fuchs/
- https://cert.vde.com/en-us/advisories/vde-2020-053
More Pepperl+Fuchs Es7506 Firmware vulnerabilities
- TI-2020-09999 Pepperl+Fuchs improper authorization affects multiple Comtrol RocketLinx products CVSS 3.1CRITICAL 9.8
- TI-2020-09996 Pepperl+Fuchs improper authorization affects multiple Comtrol RocketLinx products CVSS 3.1CRITICAL 9.8
- TI-2020-09995 Pepperl+Fuchs improper authorization affects multiple Comtrol RocketLinx products CVSS 3.1CRITICAL 9.8
- TI-2020-09997 Pepperl+Fuchs improper authorization affects multiple Comtrol RocketLinx products CVSS 3.1HIGH 8.8
Sources
- CVE-2020-12503 · CVE Program
- CVE-2020-12503 · NVD
- FIRST EPSS
- GHSA-vgv9-c2qw-673g · GitHub Advisory Database · CC BY 4.0
This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences