5 Critical Vulnerabilities in Korenix/Westermo/Pepperl+Fuchs Industrial Devices (CVE-2020-12500 to 12504)

Vulnerability Overview Title Multiple Critical Vulnerabilities in Korenix Technology, Westermo, and Pepperl+Fuchs Products Products Korenix: JetNet 5428G-20SF, JetNet 5810G, etc. Westermo: PMI-110-F2G Pepperl+Fuchs: Comtrol RocketLinx Series Vulnerable Versions See "Vulnerable/Test Versions" Fixed Versions See "Solutions" CVE IDs CVE-2020-12500 CVE-2020-12501 CVE-2020-12502 CVE-2020-12503 CVE-2020-12504 Impact Critical Discovery Date April 6, 2020 Vulnerability Description 1. Unauthenticated Device Management (CVE-2020-12500) Devices can be managed without authentication via UDP port 5010, allowing modification of network settings, triggering configuration file downloads and uploads. 2. Backdoor Accounts (CVE-2020-12501) Multiple different backdoor accounts discovered across various devices. 3. Cross-Site Request Forgery (CSRF) (CVE-2020-12502) Web interface vulnerable to CSRF attacks; attackers can trick victims into clicking malicious links to change settings. 4. Semi-Blind Authentication Command Injection (CVE-2020-12503) Command injection vulnerability in certain product lines, allowing attackers to execute arbitrary commands. 5. Arbitrary Unauthenticated TFTP Operations (CVE-2020-12504) TFTP service runs with root privileges, enabling abuse to read system files and upload malicious firmware and bootloaders. Vulnerable/Test Versions Lists specific affected products and versions. Vendor Recommendations Update to the latest firmware versions. Restrict physical and network access to prevent unauthorized operations. This information provides a detailed overview of multiple critical vulnerabilities in Korenix Technology, Westermo, and Pepperl+Fuchs products, including vulnerability types, affected products, CVE IDs, and vendor-recommended solutions.

Goal Reached Thanks to every supporter — we hit 100%!

5 Critical Vulnerabilities in Korenix/Westermo/Pepperl+Fuchs Industrial Devices (CVE-2020-12500 to 12504)