What’s Vulnerable › Vulnerabilities

CVE-2020-12514: Pepper+Fuchs Comtrol IO-Link Master NULL Pointer Dereference

• Severity: medium (CVSS 4.9 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 1.0% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2021-01-22 · updated 2026-06-17
• Weakness: CWE-476

Description

Pepperl+Fuchs Comtrol IO-Link Master in Version 1.5.48 and below is prone to a NULL Pointer Dereference that leads to a DoS in discoveryd

Affected products

• Pepperl-Fuchs Io-Link Master 4-Eip Firmware: through 1.5.48
• Pepperl-Fuchs Io-Link Master 4-Pnio Firmware: through 1.5.48
• Pepperl-Fuchs Io-Link Master 8-Eip-L Firmware: through 1.5.48
• Pepperl-Fuchs Io-Link Master 8-Eip Firmware: through 1.5.48
• Pepperl-Fuchs Io-Link Master 8-Pnio-L Firmware: through 1.5.48
• Pepperl-Fuchs Io-Link Master 8-Pnio Firmware: through 1.5.48
• Pepperl-Fuchs Io-Link Master Dr-8-Eip-P Firmware: through 1.5.48
• Pepperl-Fuchs Io-Link Master Dr-8-Eip-T Firmware: through 1.5.48
• Pepperl-Fuchs Io-Link Master Dr-8-Eip Firmware: through 1.5.48
• Pepperl-Fuchs Io-Link Master Dr-8-Pnio-P Firmware: through 1.5.48
• Pepperl-Fuchs Io-Link Master Dr-8-Pnio-T Firmware: through 1.5.48
• Pepperl-Fuchs Io-Link Master Dr-8-Pnio Firmware: through 1.5.48

References

• https://cert.vde.com/en-us/advisories/vde-2020-038
• https://cert.vde.com/en-us/advisories/vde-2020-038

Get alerted when CVE-2020-12514 or the next vulnerability affects your stack