Authorization

2020-10-1519:15:00

PRIOn knowledge base

www.prio-n.com

9.4 High

AI Score

Confidence

High

0.132 Low

EPSS

Percentile

95.6%

JSON

Improper Authorization vulnerability of Pepperl+Fuchs P+F Comtrol RocketLinx ES7510-XT, ES8509-XT, ES8510-XT, ES9528-XTv2, ES7506, ES7510, ES7528, ES8508, ES8508F, ES8510, ES8510-XTE, ES9528/ES9528-XT (all versions) and ICRL-M-8RJ45/4SFP-G-DIN, ICRL-M-16RJ45/4CP-G-DIN FW 1.2.3 and below has an active TFTP-Service.

CPENameOperatorVersion
jetwave_2212g_firmwareeq1.4
jetwave_2212s_firmwareeq1.5
jetwave_2212x_firmwareeq1.5
jetwave_2311_firmwareeq1.2
jetwave_3220_firmwareeq1.2
jetwave_3420_firmwareeq1.1.3116
jetwave_4510_firmwareeq3.0.98
jetwave_4706_firmwareeq2.3.98
jetwave_4706f_firmwareeq2.3.98
jetwave_5010_firmwareeq3.1.97

Name	Operator	Version
jetwave_2212g_firmware	eq	1.4
jetwave_2212s_firmware	eq	1.5
jetwave_2212x_firmware	eq	1.5
jetwave_2311_firmware	eq	1.2
jetwave_3220_firmware	eq	1.2
jetwave_3420_firmware	eq	1.1.3116
jetwave_4510_firmware	eq	3.0.98
jetwave_4706_firmware	eq	2.3.98
jetwave_4706f_firmware	eq	2.3.98
jetwave_5010_firmware	eq	3.1.97