{"id":"CVE-2020-12501","url":"https://www.cyber-defence.io/tools/cve/CVE-2020-12501","generatedAt":"2026-10-27T22:32:56.221Z","title":"Improper Authorization vulnerability of Pepperl+Fuchs P+F Comtrol RocketLinx ES7510-XT, ES8509-XT, ES8510-XT, ES9528-XTv2, ES7506, ES7510, ES7528, ES8508, ES8508F, ES8510, ES8510-XTE, ES9528/ES9528-XT (all versions) use undocumented accounts.","description":"Improper Authorization vulnerability of Pepperl+Fuchs P+F Comtrol RocketLinx ES7510-XT, ES8509-XT, ES8510-XT, ES9528-XTv2, ES7506, ES7510, ES7528, ES8508, ES8508F, ES8510, ES8510-XTE, ES9528/ES9528-XT (all versions) use undocumented accounts.","published":"2020-10-15T19:15:12.000Z","lastModified":"2026-06-17T02:51:55.000Z","status":"Modified","sourceIdentifier":"info@cert.vde.com","cvss":{"version":"3.1","score":9.8,"severity":"CRITICAL","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"},"cwe":["CWE-798"],"affected":["pepperl-fuchs/es7510-xt firmware","pepperl-fuchs/es8509-xt firmware","pepperl-fuchs/es8510-xt firmware","pepperl-fuchs/es9528-xtv2 firmware","pepperl-fuchs/es7506 firmware","pepperl-fuchs/es7510 firmware","pepperl-fuchs/es7528 firmware","pepperl-fuchs/es8508 firmware","pepperl-fuchs/es8508f firmware","pepperl-fuchs/es8510 firmware","pepperl-fuchs/es8510-xte firmware","pepperl-fuchs/es9528 firmware","pepperl-fuchs/es9528-xt firmware","korenix/jetnet5428g-20sfp firmware","korenix/jetnet5810g firmware","korenix/jetnet4510 firmware","korenix/jetnet5010 firmware","korenix/jetnet5310 firmware","korenix/jetnet6095 firmware","korenix/jetnet4706 firmware","korenix/jetwave 3220 firmware","korenix/jetwave 2311 firmware","korenix/jetnet4706f firmware","korenix/jetwave 2212s firmware","korenix/jetwave 2212g firmware","korenix/jetwave 2212x firmware"],"epss":{"score":0.03338,"percentile":0.88562,"date":"2026-10-26","history":[]},"kev":{"listed":false},"exploits":{"count":0,"verified":false,"firstPublished":null,"source":"Exploit-DB (https://gitlab.com/exploit-database/exploitdb)","entries":[]},"verdict":{"level":"high","text":"High impact if exploited, but EPSS currently rates exploitation as unlikely (3.34%). Schedule it in the normal patch cycle and watch for a rise in EPSS or a public exploit."},"changes":[],"references":[{"url":"http://packetstormsecurity.com/files/162903/Korenix-CSRF-Backdoor-Accounts-Command-Injection-Missing-Authentication.html","tags":["Exploit","Third Party Advisory","VDB Entry"],"source":"info@cert.vde.com"},{"url":"http://packetstormsecurity.com/files/165875/Korenix-Technology-JetWave-CSRF-Command-Injection-Missing-Authentication.html","tags":["Exploit","Third Party Advisory","VDB Entry"],"source":"info@cert.vde.com"},{"url":"http://packetstormsecurity.com/files/167409/Korenix-JetPort-5601V3-Backdoor-Account.html","tags":["Exploit","Third Party Advisory"],"source":"info@cert.vde.com"},{"url":"http://seclists.org/fulldisclosure/2021/Jun/0","tags":["Mailing List","Third Party Advisory"],"source":"info@cert.vde.com"},{"url":"http://seclists.org/fulldisclosure/2022/Jun/3","tags":["Exploit","Mailing List","Third Party Advisory"],"source":"info@cert.vde.com"},{"url":"https://cert.vde.com/de-de/advisories/vde-2020-040","tags":["Third Party Advisory"],"source":"info@cert.vde.com"},{"url":"https://sec-consult.com/vulnerability-lab/advisory/multiple-critical-vulnerabilities-in-korenix-technology-westermo-pepperl-fuchs/","tags":["Third Party Advisory"],"source":"info@cert.vde.com"},{"url":"http://packetstormsecurity.com/files/162903/Korenix-CSRF-Backdoor-Accounts-Command-Injection-Missing-Authentication.html","tags":["Exploit","Third Party Advisory","VDB Entry"],"source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://packetstormsecurity.com/files/165875/Korenix-Technology-JetWave-CSRF-Command-Injection-Missing-Authentication.html","tags":["Exploit","Third Party Advisory","VDB Entry"],"source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://packetstormsecurity.com/files/167409/Korenix-JetPort-5601V3-Backdoor-Account.html","tags":["Exploit","Third Party Advisory"],"source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://seclists.org/fulldisclosure/2021/Jun/0","tags":["Mailing List","Third Party Advisory"],"source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://seclists.org/fulldisclosure/2022/Jun/3","tags":["Exploit","Mailing List","Third Party Advisory"],"source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://cert.vde.com/de-de/advisories/vde-2020-040","tags":["Third Party Advisory"],"source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://sec-consult.com/vulnerability-lab/advisory/multiple-critical-vulnerabilities-in-korenix-technology-westermo-pepperl-fuchs/","tags":["Third Party Advisory"],"source":"af854a3a-2127-422b-91ae-364da2661108"}],"sources":{"nvd":"https://nvd.nist.gov/vuln/detail/CVE-2020-12501","epss":"https://www.first.org/epss/","kev":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog","exploitdb":"https://www.exploit-db.com/"},"licence":"CC BY 4.0 — link back to the CVE Explorer if you publish the results; upstream data remains subject to its own terms."}