What’s Vulnerable › Vulnerabilities

CVE-2020-12511: Pepper+Fuchs Comtrol IO-Link Master Cross-Site Request Forgery

• Severity: high (CVSS 8.8 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.6% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2021-01-22 · updated 2026-06-17
• Weakness: CWE-352

Description

Pepperl+Fuchs Comtrol IO-Link Master in Version 1.5.48 and below is prone to a Cross-Site Request Forgery (CSRF) in the web interface.

Affected products

• Pepperl-Fuchs Io-Link Master 4-Eip Firmware: through 1.5.48
• Pepperl-Fuchs Io-Link Master 4-Pnio Firmware: through 1.5.48
• Pepperl-Fuchs Io-Link Master 8-Eip-L Firmware: through 1.5.48
• Pepperl-Fuchs Io-Link Master 8-Eip Firmware: through 1.5.48
• Pepperl-Fuchs Io-Link Master 8-Pnio-L Firmware: through 1.5.48
• Pepperl-Fuchs Io-Link Master 8-Pnio Firmware: through 1.5.48
• Pepperl-Fuchs Io-Link Master Dr-8-Eip-P Firmware: through 1.5.48
• Pepperl-Fuchs Io-Link Master Dr-8-Eip-T Firmware: through 1.5.48
• Pepperl-Fuchs Io-Link Master Dr-8-Eip Firmware: through 1.5.48
• Pepperl-Fuchs Io-Link Master Dr-8-Pnio-P Firmware: through 1.5.48
• Pepperl-Fuchs Io-Link Master Dr-8-Pnio-T Firmware: through 1.5.48
• Pepperl-Fuchs Io-Link Master Dr-8-Pnio Firmware: through 1.5.48

References

• https://cert.vde.com/en-us/advisories/vde-2020-038
• https://cert.vde.com/en-us/advisories/vde-2020-038

Get alerted when CVE-2020-12511 or the next vulnerability affects your stack