CVE-2020-12518 MEDIUM

CVE-2020-12518: Phoenix Contact PLCnext Control Devices versions before 2021.0 LTS: An attacker can use the knowledge gained by reading the insufficiently protected sensitive information to plan further attacks.

Vendor Phoenix Contact
Product AXC F 1152 (1151412)
Weakness CWE-200 · Info exposure
Published December 17, 2020
Last update September 17, 2024
View on NVD All CVEs

CVSS base score

5.5/10
Attack vector Local
Attack complexity Low
Privileges required Low
User interaction None
Confidentiality High
Integrity None

CVSS vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

What the vulnerability does

01Description

On Phoenix Contact PLCnext Control Devices versions before 2021.0 LTS an attacker can use the knowledge gained by reading the insufficiently protected sensitive information to plan further attacks.

Key dates

02Disclosure timeline

December 17, 2020 CVE published
September 17, 2024 Record updated