Improper Authorization vulnerability of Pepperl+Fuchs P+F Comtrol RocketLinx ES7510-XT, ES8509-XT, ES8510-XT, ES9528-XTv2, ES7506, ES7510, ES7528, ES8508, ES8508F, ES8510, ES8510-XTE, ES9528/ES9528-XT (all versions) allows unauthenticated device administration.
CVSS Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:HPepperl Fuchs Es7506
HWPepperl-Fuchsall versionsPepperl Fuchs Es7506 Firmware
OSPepperl-Fuchsall versionsPepperl Fuchs Es7510
HWPepperl-Fuchsall versionsPepperl Fuchs Es7510 Firmware
OSPepperl-Fuchsall versionsPepperl Fuchs Es7510 Xt
HWPepperl-Fuchsall versionsPepperl Fuchs Es7510 Xt Firmware
OSPepperl-Fuchsall versionsPepperl Fuchs Es7528
HWPepperl-Fuchsall versionsPepperl Fuchs Es7528 Firmware
OSPepperl-Fuchsall versionsPepperl Fuchs Es8508
HWPepperl-Fuchsall versionsPepperl Fuchs Es8508f
HWPepperl-Fuchsall versionsPepperl Fuchs Es8508f Firmware
OSPepperl-Fuchsall versionsPepperl Fuchs Es8508 Firmware
OSPepperl-Fuchsall versionsPepperl Fuchs Es8509 Xt
HWPepperl-Fuchsall versionsPepperl Fuchs Es8509 Xt Firmware
OSPepperl-Fuchsall versionsPepperl Fuchs Es8510
HWPepperl-Fuchsall versionsPepperl Fuchs Es8510 Firmware
OSPepperl-Fuchsall versionsPepperl Fuchs Es8510 Xt
HWPepperl-Fuchsall versionsPepperl Fuchs Es8510 Xte
HWPepperl-Fuchsall versionsPepperl Fuchs Es8510 Xte Firmware
OSPepperl-Fuchsall versionsPepperl Fuchs Es8510 Xt Firmware
OSPepperl-Fuchsall versionsPepperl Fuchs Es9528
HWPepperl-Fuchsall versionsPepperl Fuchs Es9528 Firmware
OSPepperl-Fuchsall versionsPepperl Fuchs Es9528 Xt
HWPepperl-Fuchsall versionsPepperl Fuchs Es9528 Xt Firmware
OSPepperl-Fuchsall versionsPepperl Fuchs Es9528 Xtv2
HWPepperl-Fuchsall versionsPepperl Fuchs Es9528 Xtv2 Firmware
OSPepperl-Fuchsall versions
🟢
PATCH AVAILABLE
Vendor update available. Deploy in standard maintenance cycle.
References
Related vulnerabilities
CVE-2020-12501CRITICAL9.8PL ✓same product
Ukryte konta backdoor w przełącznikach Pepperl+Fuchs RocketLinx
CVE-2020-12504CRITICAL9.8PL ✓same product
Niezabezpieczony serwis TFTP w przełącznikach Pepperl+Fuchs RocketLinx
CVE-2020-12502HIGH8.8same product
Improper Authorization vulnerability of Pepperl+Fuchs P+F Comtrol RocketLinx ES7510-XT, ES8509-XT, ES8510-XT, ...
CVE-2020-12503HIGH7.2same product
Improper Authorization vulnerability of Pepperl+Fuchs P+F Comtrol RocketLinx ES7510-XT, ES8509-XT, ES8510-XT, ...
CVE-2024-6422CRITICAL9.8PL ✓same vendor
Brak uwierzytelnienia w Telnet — zdalne przejęcie urządzeń Pepperl-Fuchs OIT