Lucene search

MitreCVE-2020-12067

HistoryDec 26, 2022 - 7:15 p.m.

CVE-2020-12067

2022-12-2619:15:10

CWE-640

mitre

web.nvd.nist.gov

cve-2020-12067

pilz pmc

programming tool

codesys development system

password vulnerability

CVSS3

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

HIGH

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

AI Score

7.6

Confidence

High

EPSS

0.001

Percentile

32.2%

JSON

In Pilz PMC programming tool 3.x before 3.5.17 (based on CODESYS Development System), a user’s password may be changed by an attacker without knowledge of the current password.

Affected configurations

Nvd

Node

pilzpmcRange3.0.0–3.5.17

VendorProductVersionCPE
pilzpmc*cpe:2.3:a:pilz:pmc:*:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
pilz	pmc	*	cpe:2.3:a:pilz:pmc::::::::

References

cert.vde.com/en/advisories/VDE-2021-061/

CVSS3

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

HIGH

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

AI Score

7.6

Confidence

High

EPSS

0.001

Percentile

32.2%

JSON

Related for CVE-2020-12067