CVE-2020-12518

MEDIUM

Phoenix Contact PLCnext Control Devices <2021.0 LTS - Info Disclosure

Title source: llm
STIX 2.1

Description

On Phoenix Contact PLCnext Control Devices versions before 2021.0 LTS an attacker can use the knowledge gained by reading the insufficiently protected sensitive information to plan further attacks.

References (1)

Core 1
Core References
Third Party Advisory x_refsource_confirm
https://cert.vde.com/en-us/advisories/vde-2020-049

Scores

CVSS v3 5.5
EPSS 0.0074
EPSS Percentile 49.9%
Attack Vector LOCAL
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Details

CWE
CWE-200
Status published
Products (1)
phoenixcontact/plcnext_firmware < 2021.0
Published Dec 17, 2020
Tracked Since Feb 18, 2026