CVE-2020-12519: Phoenix Contact PLCnext Control Devices versions before 2021.0 LTS: An attacker can use this vulnerability i.e. to open a reverse shell with root privileges.
Published Dec 17, 2020
·Updated
On Phoenix Contact PLCnext Control Devices versions before 2021.0 LTS an attacker can use this vulnerability i.e. to open a reverse shell with root privileges.
Affected Software
7 affected components
Phoenixcontact Plcnext Firmware<2021.0
Phoenixcontact Axc F 1152
Phoenixcontact Axc F 2152
Phoenixcontact Axc F 3152
Phoenixcontact Rfc 4072s
Phoenixcontact Axc F 2152 Starterkit
Phoenixcontact Plcnext Technology Starterkit
Remediation
Information
Phoenix Contact recommends affected users to upgrade to the current Firmware 2021.0 LTS or higher which fixes these vulnerabilities.
Event History
Dec 17, 2020
CVE Published
via MITRE·10:43 PM
Data Sourced
via MITRE·10:43 PM
RemedyDescriptionSeverityWeakness
Frequently Asked Questions
1
What is CVE-2020-12519?
CVE-2020-12519 is a vulnerability found in Phoenix Contact PLCnext Control Devices versions before 2021.0 LTS that allows an attacker to open a reverse shell with root privileges.
2
How severe is CVE-2020-12519?
CVE-2020-12519 has a severity rating of 9.8, which is classified as critical.
3
Which software versions are affected by CVE-2020-12519?
Phoenix Contact PLCnext Control Devices versions before 2021.0 LTS are affected by CVE-2020-12519.
4
How can an attacker exploit CVE-2020-12519?
An attacker can exploit CVE-2020-12519 to open a reverse shell with root privileges.
5
Is there a fix for CVE-2020-12519?
Yes, upgrading to version 2021.0 LTS of Phoenix Contact PLCnext Control Devices will fix CVE-2020-12519.