CVE-2020-12067: High severity pilz pmc vulnerability
Published Dec 26, 2022
·Updated
In Pilz PMC programming tool 3.x before 3.5.17 (based on CODESYS Development System), a user's password may be changed by an attacker without knowledge of the current password.
Affected Software
1 affected component
Pilz PMC>=3.0.0<3.5.17
Event History
Dec 26, 2022
CVE Published
via MITRE·12:00 AM
Data Sourced
via MITRE·12:00 AM
Description
Data Sourced
via NVD·07:15 PM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2020-12067?
CVE-2020-12067 is classified as a high severity vulnerability due to the potential impact on user account security.
2
How do I fix CVE-2020-12067?
To mitigate CVE-2020-12067, upgrade the Pilz PMC programming tool to version 3.5.17 or later.
3
What impact does CVE-2020-12067 have on users?
CVE-2020-12067 allows an attacker to change a user's password without knowing the current password, compromising account security.
4
Which versions of Pilz PMC are affected by CVE-2020-12067?
CVE-2020-12067 affects all versions of Pilz PMC prior to 3.5.17.
5
Is it safe to use Pilz PMC programming tool version 3.0.0 to 3.5.16 after CVE-2020-12067 was identified?
Using Pilz PMC programming tool versions 3.0.0 to 3.5.16 is not safe due to the risk posed by CVE-2020-12067.