Io-link Master 8-eip Firmware CVEs and Security Vulnerabilities

CVE-2020-12514

Pepper+Fuchs Comtrol IO-Link Master NULL Pointer Dereference

Pepperl+Fuchs Comtrol IO-Link Master in Version 1.5.48 and below is prone to a NULL Pointer Dereference that leads to a DoS in discoveryd

CVSS 3.1 · 6.6 Medium EPSS 1.0% KEV · Not listed

Vendors

Pepperl-fuchs

Products

Io-link Master 4-eip Io-link Master 4-eip Firmware Io-link Master 4-pnio and 21 more

CVE-2020-12513

Pepperl+Fuchs Comtrol IO-Link Master in Version 1.5.48 and below is prone to an authenticated blind OS Command Injection.

CVSS 3.1 · 7.5 High EPSS 31.1% KEV · Not listed

Vendors

Pepperl-fuchs

Products

Io-link Master 4-eip Io-link Master 4-eip Firmware Io-link Master 4-pnio and 21 more

CVE-2020-12512

Pepperl+Fuchs Comtrol IO-Link Master in Version 1.5.48 and below is prone to an authenticated reflected POST Cross-Site Scripting

CVSS 3.1 · 7.5 High EPSS < 1% KEV · Not listed

Vendors

Pepperl-fuchs

Products

Io-link Master 4-eip Io-link Master 4-eip Firmware Io-link Master 4-pnio and 21 more

CVE-2020-12511

Pepperl+Fuchs Comtrol IO-Link Master in Version 1.5.48 and below is prone to a Cross-Site Request Forgery (CSRF) in the web interface.

CVSS 3.1 · 8.8 High EPSS < 1% KEV · Not listed

Vendors

Pepperl-fuchs

Products

Io-link Master 4-eip Io-link Master 4-eip Firmware Io-link Master 4-pnio and 21 more