CVE-2020-12504: Korenix Jetwave 2212g Firmware

Critical severity, CVSS 9.8. EPSS: 3% chance of exploitation in the next 30 days.

Improper Authorization vulnerability of Pepperl+Fuchs P+F Comtrol RocketLinx ES7510-XT, ES8509-XT, ES8510-XT, ES9528-XTv2, ES7506, ES7510, ES7528, ES8508, ES8508F, ES8510, ES8510-XTE, ES9528/ES9528-XT (all versions) and ICRL-M-8RJ45/4SFP-G-DIN, ICRL-M-16RJ45/4CP-G-DIN FW 1.2.3 and below has an active TFTP-Service.

Affected products

• Korenix Jetwave 2212g Firmware: version 1.4 only
• Korenix Jetwave 2212s Firmware: version 1.5 only
• Korenix Jetwave 2212x Firmware: version 1.5 only
• Korenix Jetwave 2311 Firmware: version 1.2 only
• Korenix Jetwave 3220 Firmware: version 1.2 only
• Korenix Jetwave 3420 Firmware: version 1.1.3t only
• Korenix Jetwave 4510 Firmware: version 3.0b only
• Korenix Jetwave 4706 Firmware: version 2.3b only
• Korenix Jetwave 4706f Firmware: version 2.3b only
• Korenix Jetwave 5010 Firmware: version 3.1a only
• Korenix Jetwave 5310 Firmware: version 1.5 only
• Korenix Jetwave 5428g-20sfp Firmware: version 1.0 only
• Korenix Jetwave 5810g Firmware: version 1.1 only
• Pepperl-Fuchs ES7506 Firmware: any version
• Pepperl-Fuchs ES7510-Xt Firmware: before 2.1.1 (fixed in 2.1.1)
• Pepperl-Fuchs ES7510 Firmware: any version
• Pepperl-Fuchs ES7528 Firmware: any version
• Pepperl-Fuchs ES8508 Firmware: any version
• Pepperl-Fuchs ES8508F Firmware: any version
• Pepperl-Fuchs ES8509-Xt Firmware: any version
• Pepperl-Fuchs ES8510-Xt Firmware: any version
• Pepperl-Fuchs ES8510-Xte Firmware: any version
• Pepperl-Fuchs ES8510 Firmware: before 3.1.1 (fixed in 3.1.1)
• Pepperl-Fuchs ES9528-Xt Firmware: any version
• Pepperl-Fuchs ES9528-XTV2 Firmware: any version
• and 4 more

Published 2020-10-15. Last modified 2026-06-17.