high8.8
CVE-2020-12511
Pepperl+Fuchs Comtrol IO-Link Master in Version 1.5.48 and below is prone to a Cross-Site Request Forgery (CSRF) in the web interface.
Impact
Pepperl+Fuchs Comtrol IO-Link Master in Version 1.5.48 and below is prone to a Cross-Site Request Forgery (CSRF) in the web interface.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Pepperl-Fuchs | Io-Link Master 4-Eip Firmware | through 1.5.48 |
| Pepperl-Fuchs | Io-Link Master 8-Eip Firmware | through 1.5.48 |
| Pepperl-Fuchs | Io-Link Master 8-Eip-L Firmware | through 1.5.48 |
| Pepperl-Fuchs | Io-Link Master Dr-8-Eip Firmware | through 1.5.48 |
| Pepperl-Fuchs | Io-Link Master Dr-8-Eip-P Firmware | through 1.5.48 |
| Pepperl-Fuchs | Io-Link Master Dr-8-Eip-T Firmware | through 1.5.48 |
| Pepperl-Fuchs | Io-Link Master 4-Pnio Firmware | through 1.5.48 |
| Pepperl-Fuchs | Io-Link Master 8-Pnio Firmware | through 1.5.48 |
| Pepperl-Fuchs | Io-Link Master 8-Pnio-L Firmware | through 1.5.48 |
| Pepperl-Fuchs | Io-Link Master Dr-8-Pnio Firmware | through 1.5.48 |
| Pepperl-Fuchs | Io-Link Master Dr-8-Pnio-P Firmware | through 1.5.48 |
| Pepperl-Fuchs | Io-Link Master Dr-8-Pnio-T Firmware | through 1.5.48 |