CVE-2020-12504 Pepperl+Fuchs improper authorization affects multiple Comtrol RocketLinx products
Attackers can access the active TFTP service on Pepperl+Fuchs Comtrol RocketLinx switches without authentication, allowing unauthorized file transfer.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2020-12504?
CVE-2020-12504 is a critical missing authorization vulnerability in Korenix JetNet, published on 15 Oct 2020. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
Improper Authorization vulnerability of Pepperl+Fuchs P+F Comtrol RocketLinx ES7510-XT, ES8509-XT, ES8510-XT, ES9528-XTv2, ES7506, ES7510, ES7528, ES8508, ES8508F, ES8510, ES8510-XTE, ES9528/ES9528-XT (all versions) and ICRL-M-8RJ45/4SFP-G-DIN, ICRL-M-16RJ45/4CP-G-DIN FW 1.2.3 and below has an active TFTP-Service.
Weakness: CWE-912
Which versions are affected by CVE-2020-12504?
It affects 29 products.
Products include Korenix Jetwave 2212g Firmware, Korenix Jetwave 2212s Firmware, Korenix Jetwave 2212x Firmware, Korenix Jetwave 2311 Firmware, Korenix Jetwave 3220 Firmware, Korenix Jetwave 3420 Firmware and 23 more.
How do I fix CVE-2020-12504?
No fix has been published for CVE-2020-12504 yet. Limit exposure of the affected software until one is available.
Upgrade, and check permissions on every request on the server, not only in the interface. More about Missing authorization.
Is CVE-2020-12504 being exploited?
There is no known exploitation of CVE-2020-12504 in the wild and no public exploit code.
Other vulnerabilities in Korenix JetNet
Sources
Also known as GHSA-66c6-xh5v-573q.