CVE-2020-12500: Pepperl-Fuchs ES7506 Firmware

Critical severity, CVSS 9.8. EPSS: 2.9% chance of exploitation in the next 30 days.

Improper Authorization vulnerability of Pepperl+Fuchs P+F Comtrol RocketLinx ES7510-XT, ES8509-XT, ES8510-XT, ES9528-XTv2, ES7506, ES7510, ES7528, ES8508, ES8508F, ES8510, ES8510-XTE, ES9528/ES9528-XT (all versions) allows unauthenticated device administration.

Affected products

• Pepperl-Fuchs ES7506 Firmware: any version
• Pepperl-Fuchs ES7510-Xt Firmware: any version
• Pepperl-Fuchs ES7510 Firmware: any version
• Pepperl-Fuchs ES7528 Firmware: any version
• Pepperl-Fuchs ES8508 Firmware: any version
• Pepperl-Fuchs ES8508F Firmware: any version
• Pepperl-Fuchs ES8509-Xt Firmware: any version
• Pepperl-Fuchs ES8510-Xt Firmware: any version
• Pepperl-Fuchs ES8510-Xte Firmware: any version
• Pepperl-Fuchs ES8510 Firmware: any version
• Pepperl-Fuchs ES9528-Xt Firmware: any version
• Pepperl-Fuchs ES9528-XTV2 Firmware: any version
• Pepperl-Fuchs ES9528 Firmware: any version

Published 2020-10-15. Last modified 2026-06-17.