What’s Vulnerable › Vulnerabilities

CVE-2020-12512: Pepper+Fuchs Comtrol IO-Link Master Cross-Site Scripting

• Severity: medium (CVSS 5.4 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.7% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2021-01-22 · updated 2026-06-17
• Weakness: CWE-79

Description

Pepperl+Fuchs Comtrol IO-Link Master in Version 1.5.48 and below is prone to an authenticated reflected POST Cross-Site Scripting

Affected products

• Pepperl-Fuchs Io-Link Master 4-Eip Firmware: through 1.5.48
• Pepperl-Fuchs Io-Link Master 4-Pnio Firmware: through 1.5.48
• Pepperl-Fuchs Io-Link Master 8-Eip-L Firmware: through 1.5.48
• Pepperl-Fuchs Io-Link Master 8-Eip Firmware: through 1.5.48
• Pepperl-Fuchs Io-Link Master 8-Pnio-L Firmware: through 1.5.48
• Pepperl-Fuchs Io-Link Master 8-Pnio Firmware: through 1.5.48
• Pepperl-Fuchs Io-Link Master Dr-8-Eip-P Firmware: through 1.5.48
• Pepperl-Fuchs Io-Link Master Dr-8-Eip-T Firmware: through 1.5.48
• Pepperl-Fuchs Io-Link Master Dr-8-Eip Firmware: through 1.5.48
• Pepperl-Fuchs Io-Link Master Dr-8-Pnio-P Firmware: through 1.5.48
• Pepperl-Fuchs Io-Link Master Dr-8-Pnio-T Firmware: through 1.5.48
• Pepperl-Fuchs Io-Link Master Dr-8-Pnio Firmware: through 1.5.48

References

• https://cert.vde.com/en-us/advisories/vde-2020-038
• https://cert.vde.com/en-us/advisories/vde-2020-038

Get alerted when CVE-2020-12512 or the next vulnerability affects your stack