VDE-2020-053

Pepperl+Fuchs: Comtrol RocketLinx ICRL-M - Multiple Vulnerabilities

view advisory published 2021-03-08

Several critical vulnerabilities within firmware.

describes (3)

Related CVEs.

ID	severity	EPSS	exploitable	published
CVE-2020-12504US	critical9.8	3.02% (87th)	—	2020-10-15
Improper Authorization vulnerability of Pepperl+Fuchs P+F Comtrol RocketLinx ES7510-XT, ES8509-XT, ES8510-XT, ES9528-XTv2, ES7506, ES7510, ES7528, ES8508, ES8508F, ES8510, ES8510-X…
CVE-2020-12503US	high7.2OT elevated	22.8% (98th)	—	2020-10-15
Improper Authorization vulnerability of Pepperl+Fuchs P+F Comtrol RocketLinx ES7510-XT, ES8509-XT, ES8510-XT, ES9528-XTv2, ES7506, ES7510, ES7528, ES8508, ES8508F, ES8510, ES8510-X…
CVE-2020-12502US	high8.8	1.03% (63rd)	—	2020-10-15
Improper Authorization vulnerability of Pepperl+Fuchs P+F Comtrol RocketLinx ES7510-XT, ES8509-XT, ES8510-XT, ES9528-XTv2, ES7506, ES7510, ES7528, ES8508, ES8508F, ES8510, ES8510-X…

External citations — patches, advisories, analysis.

Fixed
For vulnerability CVE-2020-12502 'Cross-Site Request Forgery (CSRF)', CVE-2020- 12503 'Multiple Authenticated Command Injections' and CVE-2020-12504 'Active TFTP- Service' 1. Update following products to the respective Firmware Version: | Product ID | Firmware Version | |------------------------------|-------------------| | ICRL-M-8RJ45/4SFP-G-DIN | 1.4.0 | | ICRL-M-16RJ45/4CP-G-DIN | 1.4.0 | 2. Deactivate TFTP-Service
Fixed
For vulnerability CVE-2020-12502 'Cross-Site Request Forgery (CSRF)', CVE-2020- 12503 'Multiple Authenticated Command Injections' and CVE-2020-12504 'Active TFTP- Service' 1. Update following products to the respective Firmware Version: | Product ID | Firmware Version | |------------------------------|-------------------| | ICRL-M-8RJ45/4SFP-G-DIN | 1.4.0 | | ICRL-M-16RJ45/4CP-G-DIN | 1.4.0 | 2. Deactivate TFTP-Service
Fixed
For vulnerability CVE-2020-12502 'Cross-Site Request Forgery (CSRF)', CVE-2020- 12503 'Multiple Authenticated Command Injections' and CVE-2020-12504 'Active TFTP- Service' 1. Update following products to the respective Firmware Version: | Product ID | Firmware Version | |------------------------------|-------------------| | ICRL-M-8RJ45/4SFP-G-DIN | 1.4.0 | | ICRL-M-16RJ45/4CP-G-DIN | 1.4.0 | 2. Deactivate TFTP-Service

scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.