← Zuruck zu CVEs
CVE-2020-12499
HIGH8.2
Beschreibung
In PHOENIX CONTACT PLCnext Engineer version 2020.3.1 and earlier an improper path sanitation vulnerability exists on import of project files.
CVE Details
CVSS v3.1 Bewertung8.2
SchweregradHIGH
CVSS VektorCVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:H
AngriffsvektorLOCAL
KomplexitatLOW
Erforderliche PrivilegienLOW
BenutzerinteraktionREQUIRED
Veroffentlicht7/21/2020
Zuletzt geandert11/21/2024
Quellenvd
Honeypot-Sichtungen0
Betroffene Produkte
phoenixcontact:plcnext_engineer
Schwachen (CWE)
CWE-22CWE-22
Referenzen
https://cert.vde.com/en-us/advisories/vde-2020-025(info@cert.vde.com)
https://cert.vde.com/en-us/advisories/vde-2020-025(af854a3a-2127-422b-91ae-364da2661108)
IOC Korrelationen
Keine Korrelationen erfasst
This product uses data from the NVD API but is not endorsed or certified by the NVD.