MEDIUM🇵🇱 Wersja polska

CVE-2020-12518

CVSS 5.5v3.1pub. 2020-12-17upd. 2024-11-21

On Phoenix Contact PLCnext Control Devices versions before 2021.0 LTS an attacker can use the knowledge gained by reading the insufficiently protected sensitive information to plan further attacks.

CVSS Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

  • Phoenixcontact Axc F 1152

    HW
    Phoenixcontact
    wszystkie wersje

  • Phoenixcontact Axc F 2152

    HW
    Phoenixcontact
    wszystkie wersje

  • Phoenixcontact Axc F 2152 Starterkit

    HW
    Phoenixcontact
    wszystkie wersje

  • Phoenixcontact Axc F 3152

    HW
    Phoenixcontact
    wszystkie wersje

  • Phoenixcontact Plcnext Firmware

    OS
    Phoenixcontact
    < 2021.0

  • Phoenixcontact Plcnext Technology Starterkit

    HW
    Phoenixcontact
    wszystkie wersje

  • Phoenixcontact Rfc 4072s

    HW
    Phoenixcontact
    wszystkie wersje
🔵
CHECK WITH VENDOR
No clear patch data available. Check vendor references.
CWE
References

Related vulnerabilities

CVE-2023-46142HIGH8.8ten sam produkt

A incorrect permission assignment for critical resource vulnerability in PLCnext products allows an remote att...

CVE-2021-34570HIGH7.5ten sam produkt

Multiple Phoenix Contact PLCnext control devices in versions prior to 2021.0.5 LTS are prone to a DoS attack t...

CVE-2020-12517HIGH8.8ten sam produkt

On Phoenix Contact PLCnext Control Devices versions before 2021.0 LTS an authenticated low privileged user cou...

CVE-2020-12519HIGH8.8ten sam produkt

On Phoenix Contact PLCnext Control Devices versions before 2021.0 LTS an attacker can use this vulnerability i...

CVE-2023-46144MEDIUM6.5ten sam produkt

A download of code without integrity check vulnerability in PLCnext products allows an remote attacker with lo...