Pepperl+Fuchs improper authorization affects multiple Comtrol RocketLinx products
Priority MEDIUM 48CWE-912Published · Updated
Key facts
- Attack vector
- Network
- Privileges required
- None
- User interaction
- None
- Attack complexity
- Low
- Impact type
- —
- Confidentiality · integrity · availability
- High · High · High
- Fix status
- Fixed
Attack profile from CVSS 3.1 · CNA. Fix status from CNA.
Summary
Improper Authorization vulnerability of Pepperl+Fuchs P+F Comtrol RocketLinx ES7510-XT, ES8509-XT, ES8510-XT, ES9528-XTv2, ES7506, ES7510, ES7528, ES8508, ES8508F, ES8510, ES8510-XTE, ES9528/ES9528-XT (all versions) and ICRL-M-8RJ45/4SFP-G-DIN, ICRL-M-16RJ45/4CP-G-DIN FW 1.2.3 and below has an active TFTP-Service.
Why it matters now
EPSS 0.0302 87th percentileScored 2026-11-07
Public exploit Yes 4 exploit referencesTagged by NVD
Fix Fixed P+F Comtrol RocketLinx (Pepperl+Fuchs): 2.1.1, 3.1.1JetNet (Korenix): V1.6+1 more product
SSVC decision points
Not available: CISA has not published SSVC decision points for this record.
Affected products
| Vendor | Product | Affected versions | Fixed in | Status | Source |
|---|---|---|---|---|---|
| Pepperl+Fuchs | P+F Comtrol RocketLinx | ES8509-XT, ES8510-XT, ES9528-XTv2, ES7506, ES7510, ES7528, ES8508, ES8508F, ES8510-XTE, ES9528/ES9528-XT all; ES7510-XT to before 2.1.1; ES8510 to before 3.1.1 | 2.1.1, 3.1.1 | Patch available | CNA |
| Pepperl+Fuchs | P+F Comtrol RocketLinx | ICRL-M-8RJ45/4SFP-G-DIN – 1.2.3; ICRL-M-16RJ45/4CP-G-DIN – 1.2.3 | — | No fix listed | CNA |
| Korenix | JetNet | 5428G-20SFP – V1.0; 5810G – V1.1; 4706F – V2.3b; 4510 – V3.0b; 5310 to before V1.6 | V1.6 | Patch available | CNA |
| Westermo | PMI-110-F2G | before V1.8 | V1.8 | Patch available | CNA |
- P+F Comtrol RocketLinx VendorPepperl+Fuchs Affected ES8509-XT, ES8510-XT, ES9528-XTv2, ES7506, ES7510, ES7528, ES8508, ES8508F, ES8510-XTE, ES9528/ES9528-XT all; ES7510-XT to before 2.1.1; ES8510 to before 3.1.1 Fixed in 2.1.1, 3.1.1 Patch available CNA
- P+F Comtrol RocketLinx VendorPepperl+Fuchs Affected ICRL-M-8RJ45/4SFP-G-DIN – 1.2.3; ICRL-M-16RJ45/4CP-G-DIN – 1.2.3 Fixed in — No fix listed CNA
- JetNet VendorKorenix Affected 5428G-20SFP – V1.0; 5810G – V1.1; 4706F – V2.3b; 4510 – V3.0b; 5310 to before V1.6 Fixed in V1.6 Patch available CNA
- PMI-110-F2G VendorWestermo Affected before V1.8 Fixed in V1.8 Patch available CNA
CPE configurations NVD · 58
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:o:pepperl-fuchs:es7510-xt_firmware:*:*:*:*:*:*:*:* | before 2.1.1 | Vulnerable | Pepperl+Fuchs |
| cpe:2.3:h:pepperl-fuchs:es7510-xt:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Pepperl+Fuchs |
| cpe:2.3:o:pepperl-fuchs:es8509-xt_firmware:*:*:*:*:*:*:*:* | all versions | Vulnerable | Pepperl+Fuchs |
| cpe:2.3:h:pepperl-fuchs:es8509-xt:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Pepperl+Fuchs |
| cpe:2.3:o:pepperl-fuchs:es8510-xt_firmware:*:*:*:*:*:*:*:* | all versions | Vulnerable | Pepperl+Fuchs |
| cpe:2.3:h:pepperl-fuchs:es8510-xt:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Pepperl+Fuchs |
| cpe:2.3:o:pepperl-fuchs:es9528-xtv2_firmware:*:*:*:*:*:*:*:* | all versions | Vulnerable | Pepperl+Fuchs |
| cpe:2.3:h:pepperl-fuchs:es9528-xtv2:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Pepperl+Fuchs |
| cpe:2.3:o:pepperl-fuchs:es7506_firmware:*:*:*:*:*:*:*:* | all versions | Vulnerable | Pepperl+Fuchs |
| cpe:2.3:h:pepperl-fuchs:es7506:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Pepperl+Fuchs |
- cpe:2.3:o:pepperl-fuchs:es7510-xt_firmware:*:*:*:*:*:*:*:* Versions before 2.1.1 Vulnerable ·Pepperl+Fuchs
- cpe:2.3:h:pepperl-fuchs:es7510-xt:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Pepperl+Fuchs
- cpe:2.3:o:pepperl-fuchs:es8509-xt_firmware:*:*:*:*:*:*:*:* Versions all versions Vulnerable ·Pepperl+Fuchs
- cpe:2.3:h:pepperl-fuchs:es8509-xt:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Pepperl+Fuchs
- cpe:2.3:o:pepperl-fuchs:es8510-xt_firmware:*:*:*:*:*:*:*:* Versions all versions Vulnerable ·Pepperl+Fuchs
- cpe:2.3:h:pepperl-fuchs:es8510-xt:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Pepperl+Fuchs
- cpe:2.3:o:pepperl-fuchs:es9528-xtv2_firmware:*:*:*:*:*:*:*:* Versions all versions Vulnerable ·Pepperl+Fuchs
- cpe:2.3:h:pepperl-fuchs:es9528-xtv2:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Pepperl+Fuchs
- cpe:2.3:o:pepperl-fuchs:es7506_firmware:*:*:*:*:*:*:*:* Versions all versions Vulnerable ·Pepperl+Fuchs
- cpe:2.3:h:pepperl-fuchs:es7506:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Pepperl+Fuchs
Show 48 more CPE
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:o:pepperl-fuchs:es7510_firmware:*:*:*:*:*:*:*:* | all versions | Vulnerable | Pepperl+Fuchs |
| cpe:2.3:h:pepperl-fuchs:es7510:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Pepperl+Fuchs |
| cpe:2.3:o:pepperl-fuchs:es7528_firmware:*:*:*:*:*:*:*:* | all versions | Vulnerable | Pepperl+Fuchs |
| cpe:2.3:h:pepperl-fuchs:es7528:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Pepperl+Fuchs |
| cpe:2.3:o:pepperl-fuchs:es8508_firmware:*:*:*:*:*:*:*:* | all versions | Vulnerable | Pepperl+Fuchs |
| cpe:2.3:h:pepperl-fuchs:es8508:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Pepperl+Fuchs |
| cpe:2.3:o:pepperl-fuchs:es8508f_firmware:*:*:*:*:*:*:*:* | all versions | Vulnerable | Pepperl+Fuchs |
| cpe:2.3:h:pepperl-fuchs:es8508f:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Pepperl+Fuchs |
| cpe:2.3:o:pepperl-fuchs:es8510_firmware:*:*:*:*:*:*:*:* | before 3.1.1 | Vulnerable | Pepperl+Fuchs |
| cpe:2.3:h:pepperl-fuchs:es8510:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Pepperl+Fuchs |
| cpe:2.3:o:pepperl-fuchs:es8510-xte_firmware:*:*:*:*:*:*:*:* | all versions | Vulnerable | Pepperl+Fuchs |
| cpe:2.3:h:pepperl-fuchs:es8510-xte:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Pepperl+Fuchs |
| cpe:2.3:o:pepperl-fuchs:es9528_firmware:*:*:*:*:*:*:*:* | all versions | Vulnerable | Pepperl+Fuchs |
| cpe:2.3:h:pepperl-fuchs:es9528:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Pepperl+Fuchs |
| cpe:2.3:o:pepperl-fuchs:es9528-xt_firmware:*:*:*:*:*:*:*:* | all versions | Vulnerable | Pepperl+Fuchs |
| cpe:2.3:h:pepperl-fuchs:es9528-xt:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Pepperl+Fuchs |
| cpe:2.3:o:pepperl-fuchs:icrl-m-8rj45\/4sfp-g-din_firmware:*:*:*:*:*:*:*:* | up to 1.2.3 | Vulnerable | Pepperl+Fuchs |
| cpe:2.3:h:pepperl-fuchs:icrl-m-8rj45\/4sfp-g-din:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Pepperl+Fuchs |
| cpe:2.3:o:pepperl-fuchs:icrl-m-16rj45\/4cp-g-din_firmware:*:*:*:*:*:*:*:* | up to 1.2.3 | Vulnerable | Pepperl+Fuchs |
| cpe:2.3:h:pepperl-fuchs:icrl-m-16rj45\/4cp-g-din:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Pepperl+Fuchs |
| cpe:2.3:o:korenix:jetwave_2212s_firmware:1.5:*:*:*:*:*:*:* | 1.5 | Vulnerable | Korenix |
| cpe:2.3:h:korenix:jetwave_2212s:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Korenix |
| cpe:2.3:o:korenix:jetwave_2212g_firmware:1.4:*:*:*:*:*:*:* | 1.4 | Vulnerable | Korenix |
| cpe:2.3:h:korenix:jetwave_2212g:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Korenix |
| cpe:2.3:o:korenix:jetwave_2311_firmware:1.2:*:*:*:*:*:*:* | 1.2 | Vulnerable | Korenix |
| cpe:2.3:h:korenix:jetwave_2311:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Korenix |
| cpe:2.3:o:korenix:jetwave_3220_firmware:1.2:*:*:*:*:*:*:* | 1.2 | Vulnerable | Korenix |
| cpe:2.3:h:korenix:jetwave_3220:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Korenix |
| cpe:2.3:o:korenix:jetwave_3420_firmware:1.1.3t:*:*:*:*:*:*:* | 1.1.3t | Vulnerable | Korenix |
| cpe:2.3:h:korenix:jetwave_3420:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Korenix |
| cpe:2.3:o:korenix:jetwave_2212x_firmware:1.5:*:*:*:*:*:*:* | 1.5 | Vulnerable | Korenix |
| cpe:2.3:h:korenix:jetwave_2212x:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Korenix |
| cpe:2.3:o:korenix:jetwave_5428g-20sfp_firmware:1.0:*:*:*:*:*:*:* | 1.0 | Vulnerable | Korenix |
| cpe:2.3:h:korenix:jetwave_5428g-20sfp:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Korenix |
| cpe:2.3:o:korenix:jetwave_5810g_firmware:1.1:*:*:*:*:*:*:* | 1.1 | Vulnerable | Korenix |
| cpe:2.3:h:korenix:jetwave_5810g:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Korenix |
| cpe:2.3:o:korenix:jetwave_5310_firmware:1.5:*:*:*:*:*:*:* | 1.5 | Vulnerable | Korenix |
| cpe:2.3:h:korenix:jetwave_5310:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Korenix |
| cpe:2.3:o:korenix:jetwave_5010_firmware:3.1a:*:*:*:*:*:*:* | 3.1a | Vulnerable | Korenix |
| cpe:2.3:h:korenix:jetwave_5010:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Korenix |
| cpe:2.3:o:korenix:jetwave_4706f_firmware:2.3b:*:*:*:*:*:*:* | 2.3b | Vulnerable | Korenix |
| cpe:2.3:h:korenix:jetwave_4706f:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Korenix |
| cpe:2.3:o:korenix:jetwave_4706_firmware:2.3b:*:*:*:*:*:*:* | 2.3b | Vulnerable | Korenix |
| cpe:2.3:h:korenix:jetwave_4706:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Korenix |
| cpe:2.3:o:korenix:jetwave_4510_firmware:3.0b:*:*:*:*:*:*:* | 3.0b | Vulnerable | Korenix |
| cpe:2.3:h:korenix:jetwave_4510:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Korenix |
| cpe:2.3:o:westermo:pmi-110-f2g_firmware:1.5:*:*:*:*:*:*:* | 1.5 | Vulnerable | Westermo |
| cpe:2.3:h:westermo:pmi-110-f2g:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Westermo |
- cpe:2.3:o:pepperl-fuchs:es7510_firmware:*:*:*:*:*:*:*:* Versions all versions Vulnerable ·Pepperl+Fuchs
- cpe:2.3:h:pepperl-fuchs:es7510:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Pepperl+Fuchs
- cpe:2.3:o:pepperl-fuchs:es7528_firmware:*:*:*:*:*:*:*:* Versions all versions Vulnerable ·Pepperl+Fuchs
- cpe:2.3:h:pepperl-fuchs:es7528:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Pepperl+Fuchs
- cpe:2.3:o:pepperl-fuchs:es8508_firmware:*:*:*:*:*:*:*:* Versions all versions Vulnerable ·Pepperl+Fuchs
- cpe:2.3:h:pepperl-fuchs:es8508:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Pepperl+Fuchs
- cpe:2.3:o:pepperl-fuchs:es8508f_firmware:*:*:*:*:*:*:*:* Versions all versions Vulnerable ·Pepperl+Fuchs
- cpe:2.3:h:pepperl-fuchs:es8508f:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Pepperl+Fuchs
- cpe:2.3:o:pepperl-fuchs:es8510_firmware:*:*:*:*:*:*:*:* Versions before 3.1.1 Vulnerable ·Pepperl+Fuchs
- cpe:2.3:h:pepperl-fuchs:es8510:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Pepperl+Fuchs
- cpe:2.3:o:pepperl-fuchs:es8510-xte_firmware:*:*:*:*:*:*:*:* Versions all versions Vulnerable ·Pepperl+Fuchs
- cpe:2.3:h:pepperl-fuchs:es8510-xte:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Pepperl+Fuchs
- cpe:2.3:o:pepperl-fuchs:es9528_firmware:*:*:*:*:*:*:*:* Versions all versions Vulnerable ·Pepperl+Fuchs
- cpe:2.3:h:pepperl-fuchs:es9528:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Pepperl+Fuchs
- cpe:2.3:o:pepperl-fuchs:es9528-xt_firmware:*:*:*:*:*:*:*:* Versions all versions Vulnerable ·Pepperl+Fuchs
- cpe:2.3:h:pepperl-fuchs:es9528-xt:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Pepperl+Fuchs
- cpe:2.3:o:pepperl-fuchs:icrl-m-8rj45\/4sfp-g-din_firmware:*:*:*:*:*:*:*:* Versions up to 1.2.3 Vulnerable ·Pepperl+Fuchs
- cpe:2.3:h:pepperl-fuchs:icrl-m-8rj45\/4sfp-g-din:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Pepperl+Fuchs
- cpe:2.3:o:pepperl-fuchs:icrl-m-16rj45\/4cp-g-din_firmware:*:*:*:*:*:*:*:* Versions up to 1.2.3 Vulnerable ·Pepperl+Fuchs
- cpe:2.3:h:pepperl-fuchs:icrl-m-16rj45\/4cp-g-din:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Pepperl+Fuchs
- cpe:2.3:o:korenix:jetwave_2212s_firmware:1.5:*:*:*:*:*:*:* Versions 1.5 Vulnerable ·Korenix
- cpe:2.3:h:korenix:jetwave_2212s:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Korenix
- cpe:2.3:o:korenix:jetwave_2212g_firmware:1.4:*:*:*:*:*:*:* Versions 1.4 Vulnerable ·Korenix
- cpe:2.3:h:korenix:jetwave_2212g:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Korenix
- cpe:2.3:o:korenix:jetwave_2311_firmware:1.2:*:*:*:*:*:*:* Versions 1.2 Vulnerable ·Korenix
- cpe:2.3:h:korenix:jetwave_2311:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Korenix
- cpe:2.3:o:korenix:jetwave_3220_firmware:1.2:*:*:*:*:*:*:* Versions 1.2 Vulnerable ·Korenix
- cpe:2.3:h:korenix:jetwave_3220:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Korenix
- cpe:2.3:o:korenix:jetwave_3420_firmware:1.1.3t:*:*:*:*:*:*:* Versions 1.1.3t Vulnerable ·Korenix
- cpe:2.3:h:korenix:jetwave_3420:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Korenix
- cpe:2.3:o:korenix:jetwave_2212x_firmware:1.5:*:*:*:*:*:*:* Versions 1.5 Vulnerable ·Korenix
- cpe:2.3:h:korenix:jetwave_2212x:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Korenix
- cpe:2.3:o:korenix:jetwave_5428g-20sfp_firmware:1.0:*:*:*:*:*:*:* Versions 1.0 Vulnerable ·Korenix
- cpe:2.3:h:korenix:jetwave_5428g-20sfp:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Korenix
- cpe:2.3:o:korenix:jetwave_5810g_firmware:1.1:*:*:*:*:*:*:* Versions 1.1 Vulnerable ·Korenix
- cpe:2.3:h:korenix:jetwave_5810g:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Korenix
- cpe:2.3:o:korenix:jetwave_5310_firmware:1.5:*:*:*:*:*:*:* Versions 1.5 Vulnerable ·Korenix
- cpe:2.3:h:korenix:jetwave_5310:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Korenix
- cpe:2.3:o:korenix:jetwave_5010_firmware:3.1a:*:*:*:*:*:*:* Versions 3.1a Vulnerable ·Korenix
- cpe:2.3:h:korenix:jetwave_5010:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Korenix
- cpe:2.3:o:korenix:jetwave_4706f_firmware:2.3b:*:*:*:*:*:*:* Versions 2.3b Vulnerable ·Korenix
- cpe:2.3:h:korenix:jetwave_4706f:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Korenix
- cpe:2.3:o:korenix:jetwave_4706_firmware:2.3b:*:*:*:*:*:*:* Versions 2.3b Vulnerable ·Korenix
- cpe:2.3:h:korenix:jetwave_4706:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Korenix
- cpe:2.3:o:korenix:jetwave_4510_firmware:3.0b:*:*:*:*:*:*:* Versions 3.0b Vulnerable ·Korenix
- cpe:2.3:h:korenix:jetwave_4510:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Korenix
- cpe:2.3:o:westermo:pmi-110-f2g_firmware:1.5:*:*:*:*:*:*:* Versions 1.5 Vulnerable ·Westermo
- cpe:2.3:h:westermo:pmi-110-f2g:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Westermo
Remediation
- Fix · CNA P+F Comtrol RocketLinx (Pepperl+Fuchs) Fixed in 2.1.1, 3.1.1
- Fix · CNA JetNet (Korenix) Fixed in V1.6
- Fix · CNA PMI-110-F2G (Westermo) Fixed in V1.8
Fixed in the same release
Records fixed by the same vendor advisory or release, as the CNA lists them.
- Release ·
Pepperl+Fuchs P+F Comtrol RocketLinx 2.1.1, 3.1.1
5 records Highest priority Priority MEDIUM 5 MEDIUM
Other records, highest priority first
- TI-2020-09998 Pepperl+Fuchs improper authorization affects multiple Comtrol RocketLinx productsPriority MEDIUM 52
- TI-2020-09996 Pepperl+Fuchs improper authorization affects multiple Comtrol RocketLinx productsPriority MEDIUM 48
- TI-2020-09995 Pepperl+Fuchs improper authorization affects multiple Comtrol RocketLinx productsPriority MEDIUM 47
- Release ·
Westermo PMI-110-F2G V1.8
5 records Highest priority Priority MEDIUM 5 MEDIUM
Other records, highest priority first
- TI-2020-09998 Pepperl+Fuchs improper authorization affects multiple Comtrol RocketLinx productsPriority MEDIUM 52
- TI-2020-09996 Pepperl+Fuchs improper authorization affects multiple Comtrol RocketLinx productsPriority MEDIUM 48
- TI-2020-09995 Pepperl+Fuchs improper authorization affects multiple Comtrol RocketLinx productsPriority MEDIUM 47
Show 1 more group
- Release ·
Korenix JetNet V1.6
5 records Highest priority Priority MEDIUM 5 MEDIUM
Other records, highest priority first
- TI-2020-09998 Pepperl+Fuchs improper authorization affects multiple Comtrol RocketLinx productsPriority MEDIUM 52
- TI-2020-09996 Pepperl+Fuchs improper authorization affects multiple Comtrol RocketLinx productsPriority MEDIUM 48
- TI-2020-09995 Pepperl+Fuchs improper authorization affects multiple Comtrol RocketLinx productsPriority MEDIUM 47
Timeline
- 2026-10-02 Threatist record created from CVE-2020-12504
- 2026-10-03 Alias added: GHSA-66c6-xh5v-573q
References
Exploit 4
- 20210601 SEC Consult SA-20210601-0 :: Multiple critical vulnerabilities in Korenix Technology JetNet Series
- http://packetstormsecurity.com/files/162903/Korenix-CSRF-Backdoor-Accounts-Command-Injection-Missing-Authentication.html
- https://sec-consult.com/vulnerability-lab/advisory/multiple-critical-vulnerabilities-in-korenix-technology-westermo-pepperl-fuchs/
- http://packetstormsecurity.com/files/165875/Korenix-Technology-JetWave-CSRF-Command-Injection-Missing-Authentication.html
More Pepperl+Fuchs Es7506 Firmware vulnerabilities
- TI-2020-09998 Pepperl+Fuchs improper authorization affects multiple Comtrol RocketLinx products CVSS 3.1HIGH 7.2
- TI-2020-09996 Pepperl+Fuchs improper authorization affects multiple Comtrol RocketLinx products CVSS 3.1CRITICAL 9.8
- TI-2020-09995 Pepperl+Fuchs improper authorization affects multiple Comtrol RocketLinx products CVSS 3.1CRITICAL 9.8
- TI-2020-09997 Pepperl+Fuchs improper authorization affects multiple Comtrol RocketLinx products CVSS 3.1HIGH 8.8
Sources
- CVE-2020-12504 · CVE Program
- CVE-2020-12504 · NVD
- FIRST EPSS
- GHSA-66c6-xh5v-573q · GitHub Advisory Database · CC BY 4.0
This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences