What’s Vulnerable › Vulnerabilities

CVE-2020-12513: Pepper+Fuchs Comtrol IO-Link Master OS Command Injection

• Severity: high (CVSS 8.8 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 31.1% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2021-01-22 · updated 2026-06-17
• Weakness: CWE-78

Description

Pepperl+Fuchs Comtrol IO-Link Master in Version 1.5.48 and below is prone to an authenticated blind OS Command Injection.

Affected products

• Pepperl-Fuchs Io-Link Master 4-Eip Firmware: through 1.5.48
• Pepperl-Fuchs Io-Link Master 4-Pnio Firmware: through 1.5.48
• Pepperl-Fuchs Io-Link Master 8-Eip-L Firmware: through 1.5.48
• Pepperl-Fuchs Io-Link Master 8-Eip Firmware: through 1.5.48
• Pepperl-Fuchs Io-Link Master 8-Pnio-L Firmware: through 1.5.48
• Pepperl-Fuchs Io-Link Master 8-Pnio Firmware: through 1.5.48
• Pepperl-Fuchs Io-Link Master Dr-8-Eip-P Firmware: through 1.5.48
• Pepperl-Fuchs Io-Link Master Dr-8-Eip-T Firmware: through 1.5.48
• Pepperl-Fuchs Io-Link Master Dr-8-Eip Firmware: through 1.5.48
• Pepperl-Fuchs Io-Link Master Dr-8-Pnio-P Firmware: through 1.5.48
• Pepperl-Fuchs Io-Link Master Dr-8-Pnio-T Firmware: through 1.5.48
• Pepperl-Fuchs Io-Link Master Dr-8-Pnio Firmware: through 1.5.48

References

• https://cert.vde.com/en-us/advisories/vde-2020-038
• https://cert.vde.com/en-us/advisories/vde-2020-038

Get alerted when CVE-2020-12513 or the next vulnerability affects your stack