← Vulnerability feed

Vulnerability record · CVE-2020-12504 · published 15 October 2020

CVE-2020-12504: Pepperl-fuchs es7510-xt firmware vulnerability

Pepperl Fuchs · Es7510 Xt Firmware

Improper Authorization vulnerability of Pepperl+Fuchs P+F Comtrol RocketLinx ES7510-XT, ES8509-XT, ES8510-XT, ES9528-XTv2, ES7506, ES7510, ES7528, ES8508, ES8508F, ES8510, ES8510-XTE, ES9528/ES9528-XT (all versions) and ICRL-M-8RJ45/4SFP-G-DIN, ICRL-M-16RJ45/4CP-G-DIN FW 1.2.3 and below has an active TFTP-Service.

9.8 CVSS 3.1 Critical EPSS 3.0% · top 12.9% CWE-912 · CWE-912
9.8CVSS 3.1 base score, v2 7.5
3.0%EPSS exploitation probability, 30 days
NoNot in CISA KEV
29Affected product versions listed by NVD
12References, 8 tagged exploit
17 Jun 2026Last modified by NVD

Description

Improper Authorization vulnerability of Pepperl+Fuchs P+F Comtrol RocketLinx ES7510-XT, ES8509-XT, ES8510-XT, ES9528-XTv2, ES7506, ES7510, ES7528, ES8508, ES8508F, ES8510, ES8510-XTE, ES9528/ES9528-XT (all versions) and ICRL-M-8RJ45/4SFP-G-DIN, ICRL-M-16RJ45/4CP-G-DIN FW 1.2.3 and below has an active TFTP-Service.

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Affected products

29 vulnerable configurations from NVD's CPE data, grouped by vendor and product.

References

LinkTags
http://packetstormsecurity.com/files/162903/Korenix-CSRF-Backdoor-Accounts-Command-Injection-Missing-Authentication.html ExploitThird Party AdvisoryVDB Entry
http://packetstormsecurity.com/files/165875/Korenix-Technology-JetWave-CSRF-Command-Injection-Missing-Authentication.htm ExploitThird Party AdvisoryVDB Entry
http://seclists.org/fulldisclosure/2021/Jun/0 ExploitMailing ListThird Party Advisory
https://cert.vde.com/de-de/advisories/vde-2020-040 Third Party Advisory
https://cert.vde.com/en-us/advisories/vde-2020-053 Third Party Advisory
https://sec-consult.com/vulnerability-lab/advisory/multiple-critical-vulnerabilities-in-korenix-technology-westermo-pepp ExploitThird Party Advisory
http://packetstormsecurity.com/files/162903/Korenix-CSRF-Backdoor-Accounts-Command-Injection-Missing-Authentication.html ExploitThird Party AdvisoryVDB Entry
http://packetstormsecurity.com/files/165875/Korenix-Technology-JetWave-CSRF-Command-Injection-Missing-Authentication.htm ExploitThird Party AdvisoryVDB Entry
http://seclists.org/fulldisclosure/2021/Jun/0 ExploitMailing ListThird Party Advisory
https://cert.vde.com/de-de/advisories/vde-2020-040 Third Party Advisory
https://cert.vde.com/en-us/advisories/vde-2020-053 Third Party Advisory
https://sec-consult.com/vulnerability-lab/advisory/multiple-critical-vulnerabilities-in-korenix-technology-westermo-pepp ExploitThird Party Advisory

Track CVE-2020-12504 inside VULONE

Watch it alongside the ransomware crews, C2 infrastructure and forum chatter that reference it, query it through the API and pull it into your SIEM over TAXII.

Start free Open in platform

Related vulnerabilities

Same products first, then exploited flaws of the same weakness class.

9.8CVE-2020-12501Pepperl-fuchs es7510-xt firmware hard-coded credentials vulnerabilityImproper Authorization vulnerability of Pepperl+Fuchs P+F Comtrol RocketLinx ES7510-XT, ES8509-XT, ES8510-XT, ES9528-XTv2, ES7506, ES7510, ES7528, ES…EPSS 3.3%8.8CVE-2023-23294Korenix jetwave 2212g firmware command injection vulnerabilityKorenix JetWave 4200 Series 1.3.0 and JetWave 3000 Series 1.6.0 are vulnerable to Command Injection. An attacker can modify the file_name parameter t…EPSS 2.7%8.8CVE-2023-23295Korenix jetwave 2212g firmware command injection vulnerabilityKorenix Jetwave 4200 Series 1.3.0 and JetWave 3000 Series 1.6.0 are vulnerable to Command Injection via /goform/formSysCmd. An attacker an modify the…EPSS 3.8%8.8CVE-2021-39280Korenix jetwave 2212s firmware vulnerabilityCertain Korenix JetWave devices allow authenticated users to execute arbitrary code as root via /syscmd.asp. This affects 2212X before 1.9.1, 2212S b…EPSS 2.3%7.2CVE-2020-12503Pepperl-fuchs es7510-xt firmware incorrect authorization vulnerabilityImproper Authorization vulnerability of Pepperl+Fuchs P+F Comtrol RocketLinx ES7510-XT, ES8509-XT, ES8510-XT, ES9528-XTv2, ES7506, ES7510, ES7528, ES…EPSS 23%6.5CVE-2023-23296Korenix jetwave 2212g firmware uncontrolled resource consumption vulnerabilityKorenix JetWave 4200 Series 1.3.0 and JetWave 3200 Series 1.6.0 are vulnerable to Denial of Service via /goform/formDefault.EPSS 0.80%4.9CVE-2025-47729TeleMessage archiving backend stores cleartext message copiesThe TeleMessage archiving backend through 2025-05-05 retains cleartext copies of messages from TM SGNL (Archive Signal) app users, contradicting the …KEVEPSS 0.45%analysed9.8CVE-2024-20439Cisco Smart Licensing Utility hard-coded admin credential allows remote loginCisco Smart Licensing Utility (CSLU) contains an undocumented static credential for an administrative account. An unauthenticated remote attacker who…KEVEPSS 97%analysed

Source: NIST National Vulnerability Database (record CVE-2020-12504), CISA KEV, FIRST EPSS (scores of 2026-10-09). This page is refreshed as NVD updates the record.