What’s Vulnerable › Vulnerabilities

CVE-2020-12524: Phoenix Contact BTP Touch Panels uncontrolled resource consumption

• Severity: high (CVSS 7.5 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 1.1% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2020-12-02 · updated 2026-06-17
• Weakness: CWE-400

Description

Uncontrolled Resource Consumption can be exploited to cause the Phoenix Contact HMIs BTP 2043W, BTP 2070W and BTP 2102W in all versions to become unresponsive and not accurately update the display content (Denial of Service).

Affected products

• Phoenixcontact Btp 2043W Firmware: all versions
• Phoenixcontact Btp 2070W Firmware: all versions
• Phoenixcontact Btp 2102W Firmware: all versions

References

• https://cert.vde.com/en-us/advisories/vde-2020-047
• https://cert.vde.com/en-us/advisories/vde-2020-047

Get alerted when CVE-2020-12524 or the next vulnerability affects your stack