CVE-2020-12502: Korenix Jetnet 4510 Firmware

High severity, CVSS 8.8. EPSS: 1% chance of exploitation in the next 30 days.

Improper Authorization vulnerability of Pepperl+Fuchs P+F Comtrol RocketLinx ES7510-XT, ES8509-XT, ES8510-XT, ES9528-XTv2, ES7506, ES7510, ES7528, ES8508, ES8508F, ES8510, ES8510-XTE, ES9528/ES9528-XT (all versions) and ICRL-M-8RJ45/4SFP-G-DIN, ICRL-M-16RJ45/4CP-G-DIN FW 1.2.3 and below is prone to unauthenticated device administration.

Affected products

• Korenix Jetnet 4510 Firmware: affected versions not specified
• Korenix Jetnet 4706 Firmware: affected versions not specified
• Korenix Jetnet 4706f Firmware: affected versions not specified
• Korenix Jetnet 5010 Firmware: affected versions not specified
• Korenix Jetnet 5310 Firmware: affected versions not specified
• Korenix Jetnet 5428g-20sfp Firmware: affected versions not specified
• Korenix Jetnet 5810g Firmware: affected versions not specified
• Korenix Jetnet 6095 Firmware: affected versions not specified
• Pepperl-Fuchs ES7506 Firmware: any version
• Pepperl-Fuchs ES7510-Xt Firmware: any version
• Pepperl-Fuchs ES7510 Firmware: any version
• Pepperl-Fuchs ES7528 Firmware: any version
• Pepperl-Fuchs ES8508 Firmware: any version
• Pepperl-Fuchs ES8508F Firmware: any version
• Pepperl-Fuchs ES8509-Xt Firmware: any version
• Pepperl-Fuchs ES8510-Xt Firmware: any version
• Pepperl-Fuchs ES8510-Xte Firmware: any version
• Pepperl-Fuchs ES8510 Firmware: any version
• Pepperl-Fuchs ES9528-Xt Firmware: any version
• Pepperl-Fuchs ES9528-XTV2 Firmware: any version
• Pepperl-Fuchs ES9528 Firmware: any version
• Pepperl-Fuchs Icrl-M-16rj45/4cp-G-Din Firmware: up to and including 1.2.3; before 1.4.0 (fixed in 1.4.0)
• Pepperl-Fuchs Icrl-M-8rj45/4sfp-G-Din Firmware: up to and including 1.2.3; before 1.4 (fixed in 1.4)

Published 2020-10-15. Last modified 2026-06-17.