Evil-DB LogoEvil-DB
← All CVEs

CVE-2020-12513

high · 7.5

Pepperl+Fuchs Comtrol IO-Link Master in Version 1.5.48 and below is prone to an authenticated blind OS Command Injection.

7.5
CVSS
31.1%
EPSS (exploit prob.)
98th
EPSS percentile
2021-01-22
Published

CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

Weaknesses

CWE-78

Affected products

VendorProductAffected versions
pepperl-fuchsio-link_master_4-eip_firmware<= 1.5.48
pepperl-fuchsio-link_master_4-eipall versions
pepperl-fuchsio-link_master_8-eip_firmware<= 1.5.48
pepperl-fuchsio-link_master_8-eipall versions
pepperl-fuchsio-link_master_8-eip-l_firmware<= 1.5.48
pepperl-fuchsio-link_master_8-eip-lall versions
pepperl-fuchsio-link_master_dr-8-eip_firmware<= 1.5.48
pepperl-fuchsio-link_master_dr-8-eipall versions
pepperl-fuchsio-link_master_dr-8-eip-p_firmware<= 1.5.48
pepperl-fuchsio-link_master_dr-8-eip-pall versions
pepperl-fuchsio-link_master_dr-8-eip-t_firmware<= 1.5.48
pepperl-fuchsio-link_master_dr-8-eip-tall versions
pepperl-fuchsio-link_master_4-pnio_firmware<= 1.5.48
pepperl-fuchsio-link_master_4-pnioall versions
pepperl-fuchsio-link_master_8-pnio_firmware<= 1.5.48
pepperl-fuchsio-link_master_8-pnioall versions
pepperl-fuchsio-link_master_8-pnio-l_firmware<= 1.5.48
pepperl-fuchsio-link_master_8-pnio-lall versions
pepperl-fuchsio-link_master_dr-8-pnio_firmware<= 1.5.48
pepperl-fuchsio-link_master_dr-8-pnioall versions
pepperl-fuchsio-link_master_dr-8-pnio-p_firmware<= 1.5.48
pepperl-fuchsio-link_master_dr-8-pnio-pall versions
pepperl-fuchsio-link_master_dr-8-pnio-t_firmware<= 1.5.48
pepperl-fuchsio-link_master_dr-8-pnio-tall versions

Check a specific version with /api/v1/cve/match.

References

Query this programmatically:

curl https://evil-db.io/api/v1/cve/CVE-2020-12513