CVE-2020-12503Jetnet 4510 Firmware Authorization Bypass
Improper Authorization vulnerability of Pepperl+Fuchs P+F Comtrol RocketLinx ES7510-XT, ES8509-XT, ES8510-XT, ES9528-XTv2, ES7506, ES7510, ES7528, ES8508, ES8508F, ES8510, ES8510-XTE, ES9528/ES9528-XT (all versions) and ICRL-M-8RJ45/4SFP-G-DIN, ICRL-M-16RJ45/4CP-G-DIN FW 1.2.3…
Published Oct 15, 2020 · Updated Nov 21, 2024
Key Facts
Patch in the next maintenance window- CVE-2020-12503 is a high-severity vulnerability (CVSS 7.2 v3.1) affecting Jetnet 4510 Firmware (Korenix), Jetnet 4706f Firmware (Korenix), Jetnet 4706 Firmware (Korenix) and 22 more products.
- It is not listed in any known-exploited vulnerabilities catalog. No public exploit code is known.
- EPSS estimates a 23% probability of exploitation in the next 30 days.
- Fixed versions are available, including JetNet V1.6, P+F Comtrol RocketLinx 2.1.1, P+F Comtrol RocketLinx 3.1.1.
- Brandefense priority: patch in the next maintenance window, because of its high severity, although no exploitation is known.
Scores
CVSS v3.1
7.2
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
EPSS (30-day exploit likelihood)
23%
Higher than 97.7% of all scored CVEs
Exploit maturity
Proof of concept
ATLAS score
43/100
Publication score, see How it works
Exploitation Verdict
KEV listed
Not listed
Federal due date
None
No federal due date
Ransomware use
Not reported
Attributed actors
None named
Exploit & Defence Guidance
Exploit maturity
Proof of concept
Public exploit code
2
Proof-of-concept links
In-the-wild evidence
0
Reports of active use
Advisories And Exploit References
- advisoryhttps://cert.vde.com/de-de/advisories/vde-2020-040
- advisoryhttps://cert.vde.com/en-us/advisories/vde-2020-053
- advisory20210601 SEC Consult SA-20210601-0 :: Multiple critical vulnerabilities in Korenix Technology JetNet Series
- advisoryhttps://sec-consult.com/vulnerability-lab/advisory/multiple-critical-vulnerabilities-in-korenix-technology-westermo-pepperl-fuchs/
Description
Improper Authorization vulnerability of Pepperl+Fuchs P+F Comtrol RocketLinx ES7510-XT, ES8509-XT, ES8510-XT, ES9528-XTv2, ES7506, ES7510, ES7528, ES8508, ES8508F, ES8510, ES8510-XTE, ES9528/ES9528-XT (all versions) and ICRL-M-8RJ45/4SFP-G-DIN, ICRL-M-16RJ45/4CP-G-DIN FW 1.2.3 and below is prone to multiple authenticated command injections.
Affected Products
33 affected entries in total| Product | Affected versions | Fixed in |
|---|---|---|
| Jetnet 4510 FirmwareKorenix | See advisory | n/a |
| Jetnet 4706f FirmwareKorenix | See advisory | n/a |
| Jetnet 4706 FirmwareKorenix | See advisory | n/a |
| Jetnet 5010 FirmwareKorenix | See advisory | n/a |
| Jetnet 5310 FirmwareKorenix | See advisory | n/a |
Patched Releases
JetNet
V1.6
P+F Comtrol RocketLinx
2.1.1, 3.1.1
pepperl-fuchs icrl-m-16rj45\/4cp-g-din firmware
<=1.3.1
pepperl-fuchs icrl-m-8rj45\/4sfp-g-din firmware
<=1.3.1
PMI-110-F2G
V1.8
Timeline
Publicly disclosed
Oct 15, 2020
Last updated
Nov 21, 2024
Weakness Type
- CWE-863 Incorrect Authorization
References
- advisorycert.vde.com · vde-2020-040
- advisorycert.vde.com · vde-2020-053
- advisory20210601 SEC Consult SA-20210601-0 :: Multiple critical vulnerabilities in Korenix Technology JetNet Series
- advisorysec-consult.com · multiple-critical-vulnerabilities-in-korenix-te…
- exploitpacketstormsecurity.com · Korenix-CSRF-Backdoor-Accounts-Command-Injectio…
FAQ
Common Questions.
Improper Authorization vulnerability of Pepperl+Fuchs P+F Comtrol RocketLinx ES7510-XT, ES8509-XT, ES8510-XT, ES9528-XTv2, ES7506, ES7510, ES7528, ES8508, ES8508F, ES8510, ES8510-XTE, ES9528/ES9528-XT (all versions) and ICRL-M-8RJ45/4SFP-G-DIN, ICRL-M-16RJ45/4CP-G-DIN FW 1.2.3 and below is prone to multiple authentica…
Affected: Jetnet 4510 Firmware (Korenix); Jetnet 4706f Firmware (Korenix); Jetnet 4706 Firmware (Korenix), among others. The full list is in the CVE brief.
It is not listed in any known-exploited vulnerabilities catalog.
No, it is not currently listed in the CISA Known Exploited Vulnerabilities catalog.
No public exploit code is known.
Fixed versions are available, including JetNet V1.6, P+F Comtrol RocketLinx 2.1.1, P+F Comtrol RocketLinx 3.1.1.
Brandefense priority: patch in the next maintenance window, because of its high severity, although no exploitation is known.
Is CVE-2020-12503 On Your Attack Surface?
Brandefense matches it against the products discovered on your perimeter and opens a finding the day a CVE like this is listed.
Request A Demo