high7.5
CVE-2020-12513
Pepperl+Fuchs Comtrol IO-Link Master in Version 1.5.48 and below is prone to an authenticated blind OS Command Injection.
Impact
Pepperl+Fuchs Comtrol IO-Link Master in Version 1.5.48 and below is prone to an authenticated blind OS Command Injection.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Pepperl-Fuchs | Io-Link Master 4-Eip Firmware | through 1.5.48 |
| Pepperl-Fuchs | Io-Link Master 8-Eip Firmware | through 1.5.48 |
| Pepperl-Fuchs | Io-Link Master 8-Eip-L Firmware | through 1.5.48 |
| Pepperl-Fuchs | Io-Link Master Dr-8-Eip Firmware | through 1.5.48 |
| Pepperl-Fuchs | Io-Link Master Dr-8-Eip-P Firmware | through 1.5.48 |
| Pepperl-Fuchs | Io-Link Master Dr-8-Eip-T Firmware | through 1.5.48 |
| Pepperl-Fuchs | Io-Link Master 4-Pnio Firmware | through 1.5.48 |
| Pepperl-Fuchs | Io-Link Master 8-Pnio Firmware | through 1.5.48 |
| Pepperl-Fuchs | Io-Link Master 8-Pnio-L Firmware | through 1.5.48 |
| Pepperl-Fuchs | Io-Link Master Dr-8-Pnio Firmware | through 1.5.48 |
| Pepperl-Fuchs | Io-Link Master Dr-8-Pnio-P Firmware | through 1.5.48 |
| Pepperl-Fuchs | Io-Link Master Dr-8-Pnio-T Firmware | through 1.5.48 |