CVE-2020-12503: korenix jetnet Incorrect Authorization
Vulnerability summary
CVE-2020-12503 is a high (CVSS 7.2) Incorrect Authorization vulnerability in korenix jetnet. EPSS estimates a 22.83% chance of exploitation in the next 30 days, higher than 97.7% of scored vulnerabilities. 2 public exploits are recorded.
Timeline
- 15-10-2020PublishedVulnerability first disclosed.
- 17-09-2024Last modifiedVulnerability information updated.
Description
Improper Authorization vulnerability of Pepperl+Fuchs P+F Comtrol RocketLinx ES7510-XT, ES8509-XT, ES8510-XT, ES9528-XTv2, ES7506, ES7510, ES7528, ES8508, ES8508F, ES8510, ES8510-XTE, ES9528/ES9528-XT (all versions) and ICRL-M-8RJ45/4SFP-G-DIN, ICRL-M-16RJ45/4CP-G-DIN FW 1.2.3 and below is prone to multiple authenticated command injections.
CVSS metrics
3 scores · 2 sources · 2 versions- NVDNIST7.2HighCVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
EPSS trend
Probability
22.83%
Chance of exploitation in the next 30 days
Percentile
98%
Versus all other CVEs
30-day change
-0.45 pp
From 23.28% on 21-09-2026
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
2 foundExploit Reference (packetstormsecurity.com)
Maturity: unknown
Exploit Reference (packetstormsecurity.com)
Maturity: unknown
Weaknesses
CWE · root causeAffected systems
Korenix14 products
- jetnet≥ 5428G-20SFP, ≤ V1.0 | ≥ 5810G, ≤ V1.1 | ≥ 4706F, ≤ V2.3b | ≥ 4510, ≤ V3.0b | ≥ 5310, < V1.6
- jetnet_4510_firmwarena
- jetnet_4706_firmwarena
- jetnet_4706f_firmwarena
- jetnet_5010_firmwarena
Pepperl-fuchs2 products
- icrl-m-16rj45\/4cp-g-din_firmware≤ 1.3.1 | na
- icrl-m-8rj45\/4sfp-g-din_firmware≤ 1.3.1 | na
Pepperl+fuchs1 product
- p+f comtrol rocketlinxES8509-XT, ES8510-XT, ES9528-XTv2, ES7506, ES7510, ES7528, ES8508, ES8508F, ES8510-XTE, ES9528/ES9528-XT all | ≥ ES7510-XT, < 2.1.1 | ≥ ES8510, < 3.1.1 | ≥ ICRL-M-8RJ45/4SFP-G-DIN, ≤ 1.2.3 | ≥ ICRL-M-16RJ45/4CP-G-DIN, ≤ 1.2.3
Westermo1 product
- pmi-110-f2g_firmware≥ unspecified, < V1.8
4 vendors · 18 products