CVE-2020-12500 : Improper Authorization vulnerability of Pepperl+Fuchs P+F Comtrol RocketLinx ES7

Improper Authorization vulnerability of Pepperl+Fuchs P+F Comtrol RocketLinx ES7510-XT, ES8509-XT, ES8510-XT, ES9528-XTv2, ES7506, ES7510, ES7528, ES8508, ES8508F, ES8510, ES8510-XTE, ES9528/ES9528-XT (all versions) allows unauthenticated device administration.

Published 2020-10-15 19:15:11

Updated 2022-04-29 02:09:57

Source CERT VDE

View at NVD, CVE.org

Products affected by CVE-2020-12500

Pepperl-fuchs » Es7510-xt Firmware
cpe:2.3:o:pepperl-fuchs:es7510-xt_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Pepperl-fuchs » Es7510-xt » Version: N/A
Pepperl-fuchs » Es8509-xt Firmware
cpe:2.3:o:pepperl-fuchs:es8509-xt_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Pepperl-fuchs » Es8509-xt » Version: N/A
Pepperl-fuchs » Es8510-xt Firmware
cpe:2.3:o:pepperl-fuchs:es8510-xt_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Pepperl-fuchs » Es8510-xt » Version: N/A
Pepperl-fuchs » Es9528-xtv2 Firmware
cpe:2.3:o:pepperl-fuchs:es9528-xtv2_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Pepperl-fuchs » Es9528-xtv2 » Version: N/A
Pepperl-fuchs » Es7506 Firmware
cpe:2.3:o:pepperl-fuchs:es7506_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Pepperl-fuchs » Es7506 » Version: N/A
Pepperl-fuchs » Es7510 Firmware
cpe:2.3:o:pepperl-fuchs:es7510_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Pepperl-fuchs » Es7510 » Version: N/A
Pepperl-fuchs » Es7528 Firmware
cpe:2.3:o:pepperl-fuchs:es7528_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Pepperl-fuchs » Es7528 » Version: N/A
Pepperl-fuchs » Es8508 Firmware
cpe:2.3:o:pepperl-fuchs:es8508_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Pepperl-fuchs » Es8508 » Version: N/A
Pepperl-fuchs » Es8508f Firmware
cpe:2.3:o:pepperl-fuchs:es8508f_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Pepperl-fuchs » Es8508f » Version: N/A
Pepperl-fuchs » Es8510 Firmware
cpe:2.3:o:pepperl-fuchs:es8510_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Pepperl-fuchs » Es8510 » Version: N/A
Pepperl-fuchs » Es8510-xte Firmware
cpe:2.3:o:pepperl-fuchs:es8510-xte_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Pepperl-fuchs » Es8510-xte » Version: N/A
Pepperl-fuchs » Es9528 Firmware
cpe:2.3:o:pepperl-fuchs:es9528_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Pepperl-fuchs » Es9528 » Version: N/A
Pepperl-fuchs » Es9528-xt Firmware
cpe:2.3:o:pepperl-fuchs:es9528-xt_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Pepperl-fuchs » Es9528-xt » Version: N/A

Exploit prediction scoring system (EPSS) score for CVE-2020-12500

EPSS FAQ

6.46%

Probability of exploitation activity in the next 30 days EPSS Score History

~ 90 %

Percentile, the proportion of vulnerabilities that are scored at or less

CVSS scores for CVE-2020-12500

Base Score	Base Severity	CVSS Vector	Exploitability Score	Impact Score	Score Source
7.5	HIGH	AV:N/AC:L/Au:N/C:P/I:P/A:P	10.0	6.4	NIST
Access Vector: Network Access Complexity: Low Authentication: None Confidentiality Impact: Partial Integrity Impact: Partial Availability Impact: Partial
9.8	CRITICAL	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H	3.9	5.9	CERT VDE
Attack Vector: Network Attack Complexity: Low Privileges Required: None User Interaction: None Scope: Unchanged Confidentiality: High Integrity: High Availability: High
9.8	CRITICAL	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H	3.9	5.9	NIST
Attack Vector: Network Attack Complexity: Low Privileges Required: None User Interaction: None Scope: Unchanged Confidentiality: High Integrity: High Availability: High

CWE ids for CVE-2020-12500

CWE-306 Missing Authentication for Critical Function

The product does not perform any authentication for functionality that requires a provable user identity or consumes a significant amount of resources.
Assigned by:
- info@cert.vde.com (Primary)
- nvd@nist.gov (Secondary)

References for CVE-2020-12500

http://packetstormsecurity.com/files/165875/Korenix-Technology-JetWave-CSRF-Command-Injection-Missing-Authentication.html

Korenix Technology JetWave CSRF / Command Injection / Missing Authentication ≈ Packet Storm
Exploit;Third Party Advisory;VDB Entry

CVEs referencing this url
http://seclists.org/fulldisclosure/2021/Jun/0

Full Disclosure: SEC Consult SA-20210601-0 :: Multiple critical vulnerabilities in Korenix Technology JetNet Series
Exploit;Mailing List;Third Party Advisory

CVEs referencing this url
https://sec-consult.com/vulnerability-lab/advisory/multiple-critical-vulnerabilities-in-korenix-technology-westermo-pepperl-fuchs/

Multiple Critical Vulnerabilities in Korenix Technology, Westermo and Pepperl+Fuchs products
Third Party Advisory

CVEs referencing this url
http://packetstormsecurity.com/files/162903/Korenix-CSRF-Backdoor-Accounts-Command-Injection-Missing-Authentication.html

Korenix CSRF / Backdoor Accounts / Command Injection / Missing Authentication ≈ Packet Storm
Exploit;Third Party Advisory;VDB Entry

CVEs referencing this url
https://cert.vde.com/de-de/advisories/vde-2020-040

PEPPERL+FUCHS: Multiple Products prone to multiple vulnerabilities in Comtrol RocketLinux (Update A) — German (Germany)
Third Party Advisory

CVEs referencing this url

Jump to

Vulnerability Details : CVE-2020-12500

Products affected by CVE-2020-12500

Exploit prediction scoring system (EPSS) score for CVE-2020-12500

CVSS scores for CVE-2020-12500

CWE ids for CVE-2020-12500

References for CVE-2020-12500