CVE-2020-12500: korenix jetnet
Vulnerability summary
CVE-2020-12500 is a critical (CVSS 9.8) vulnerability in korenix jetnet. EPSS estimates a 2.89% chance of exploitation in the next 30 days, higher than 86.7% of scored vulnerabilities. 3 public exploits are recorded.
Timeline
- 15-10-2020PublishedVulnerability first disclosed.
- 17-09-2024Last modifiedVulnerability information updated.
Description
Improper Authorization vulnerability of Pepperl+Fuchs P+F Comtrol RocketLinx ES7510-XT, ES8509-XT, ES8510-XT, ES9528-XTv2, ES7506, ES7510, ES7528, ES8508, ES8508F, ES8510, ES8510-XTE, ES9528/ES9528-XT (all versions) allows unauthenticated device administration.
CVSS metrics
3 scores · 2 sources · 2 versions- NVDNIST9.8CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
EPSS trend
Probability
2.89%
Chance of exploitation in the next 30 days
Percentile
87%
Versus all other CVEs
30-day change
0.00 pp
From 2.89% on 21-09-2026
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
3 foundExploit Reference (seclists.org)
Maturity: unknown
Exploit Reference (packetstormsecurity.com)
Maturity: unknown
Exploit Reference (packetstormsecurity.com)
Maturity: unknown
Weaknesses
CWE · root causeAffected systems
Korenix1 product
- jetnet≥ 5428G-20SFP, ≤ V1.0 | ≥ 5810G, ≤ V1.1 | ≥ 4706F, ≤ V2.3b | ≥ 4510, ≤ V3.0b | ≥ 5310, < V1.6
Pepperl+fuchs1 product
- p+f comtrol rocketlinxES8509-XT, ES8510-XT, ES9528-XTv2, ES7506, ES7510, ES7528, ES8508, ES8508F, ES8510-XTE, ES9528/ES9528-XT all | ≥ ES7510-XT, < 2.1.1 | ≥ ES8510, < 3.1.1
Westermo1 product
- pmi-110-f2g_firmware≥ unspecified, < V1.8
3 vendors · 3 products