CVE-2020-12504

Improper Authorization vulnerability of Pepperl+Fuchs P+F Comtrol RocketLinx ES7510-XT, ES8509-XT, ES8510-XT, ES9528-XTv2, ES7506, ES7510, ES7528, ES8508, ES8508F, ES8510, ES8510-XTE, ES9528/ES9528-XT (all versions) and ICRL-M-8RJ45/4SFP-G-DIN, ICRL-M-16RJ45/4CP-G-DIN FW 1.2.3 and below has an active TFTP-Service.

Scoring

Severity

CRITICAL

CVSS base score

9.8

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS probability

0.55%

CWE

CWE-912

Published

2020-10-15

Last modified

2026-03-14

Affected products

• Pepperl+Fuchs P+F Comtrol RocketLinx
• Pepperl+Fuchs P+F Comtrol RocketLinx
• Pepperl+Fuchs P+F Comtrol RocketLinx
• Pepperl+Fuchs P+F Comtrol RocketLinx
• Pepperl+Fuchs P+F Comtrol RocketLinx
• Korenix JetNet
• Korenix JetNet
• Korenix JetNet

Weakness type

• CWE-912

Related vulnerabilities

• CVE-2024-20439 — A vulnerability in Cisco Smart Licensing Utility (CSLU) could allow an unauthenticated, remote attacker to log into an a
• CVE-2010-20103 — ProFTPD 1.3.3c Backdoor Command Execution
• CVE-2011-10018 — myBB 1.6.4 Backdoor Arbitrary Command Execution
• CVE-2025-34117 — Netcore / Netis Routers RCE via UDP Port 53413 Backdoor
• CVE-2026-3587 — Hidden CLI Function Allows Root Access
• CVE-2024-39754 — A static login vulnerability exists in the wctrls functionality of Wavlink AC3000 M33A8.V5030.210505. A specially crafte
• CVE-2024-45697 — D-Link WiFi router - Hidden Functionality
• CVE-2022-3203 — ORing net IAP-420(+) Hidden Functionality

Markdown version · Browse all CVEs