3 results (0.002 seconds)

CVSS: 8.8EPSS: 0%CPEs: 50EXPL: 5

CVE-2020-12502 – Pepperl+Fuchs improper authorization affects multiple Comtrol RocketLinx products

https://notcve.org/view.php?id=CVE-2020-12502

05 Oct 2020 — Improper Authorization vulnerability of Pepperl+Fuchs P+F Comtrol RocketLinx ES7510-XT, ES8509-XT, ES8510-XT, ES9528-XTv2, ES7506, ES7510, ES7528, ES8508, ES8508F, ES8510, ES8510-XTE, ES9528/ES9528-XT (all versions) and ICRL-M-8RJ45/4SFP-G-DIN, ICRL-M-16RJ45/4CP-G-DIN FW 1.2.3 and below is prone to unauthenticated device administration. Una vulnerabilidad de Autorización Inapropiada de Pepperl+Fuchs P+F Comtrol RocketLinx ES7510-XT, ES8509-XT, ES8510-XT, ES9528-XTv2, ES7506, ES7510, ES7528, ES8508, ES8508F,... • https://packetstorm.news/files/id/162903 • CWE-352: Cross-Site Request Forgery (CSRF) •

CVSS: 7.2EPSS: 5%CPEs: 60EXPL: 4

CVE-2020-12503 – Pepperl+Fuchs improper authorization affects multiple Comtrol RocketLinx products

https://notcve.org/view.php?id=CVE-2020-12503

05 Oct 2020 — Improper Authorization vulnerability of Pepperl+Fuchs P+F Comtrol RocketLinx ES7510-XT, ES8509-XT, ES8510-XT, ES9528-XTv2, ES7506, ES7510, ES7528, ES8508, ES8508F, ES8510, ES8510-XTE, ES9528/ES9528-XT (all versions) and ICRL-M-8RJ45/4SFP-G-DIN, ICRL-M-16RJ45/4CP-G-DIN FW 1.2.3 and below is prone to multiple authenticated command injections. Una vulnerabilidad de Autorización Inapropiada de Pepperl+Fuchs P+F Comtrol RocketLinx ES7510-XT, ES8509-XT, ES8510-XT, ES9528-XTv2, ES7506, ES7510, ES7528, ES8508, ES85... • https://packetstorm.news/files/id/162903 • CWE-863: Incorrect Authorization •

CVSS: 9.8EPSS: 1%CPEs: 58EXPL: 6

CVE-2020-12504 – Pepperl+Fuchs improper authorization affects multiple Comtrol RocketLinx products

https://notcve.org/view.php?id=CVE-2020-12504

05 Oct 2020 — Improper Authorization vulnerability of Pepperl+Fuchs P+F Comtrol RocketLinx ES7510-XT, ES8509-XT, ES8510-XT, ES9528-XTv2, ES7506, ES7510, ES7528, ES8508, ES8508F, ES8510, ES8510-XTE, ES9528/ES9528-XT (all versions) and ICRL-M-8RJ45/4SFP-G-DIN, ICRL-M-16RJ45/4CP-G-DIN FW 1.2.3 and below has an active TFTP-Service. Una vulnerabilidad de Autorización Inapropiada de Pepperl+Fuchs P+F Comtrol RocketLinx ES7510-XT, ES8509-XT, ES8510-XT, ES9528-XTv2, ES7506, ES7510, ES7528, ES8508, ES8508F, ES8510, ES8510-XTE, ES... • https://packetstorm.news/files/id/162903 • CWE-912: Hidden Functionality •