Design/Logic Flaw

2023-01-2621:15:00

PRIOn knowledge base

www.prio-n.com

rehau

pcoweb card

bios v6.27

vulnerability

unauthenticated access

7.8 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

50.2%

JSON

An issue was discovered in Rehau devices that use a pCOWeb card BIOS v6.27, BOOT v5.00, web version v2.2, allows attackers to gain full unauthenticated access to the configuration and service interface.

CPENameOperatorVersion
pcoweb_card_bioseq6.27
pcoweb_card_booteq5.00
pcoweb_card_webeq2.2

Name	Operator	Version
pcoweb_card_bios	eq	6.27
pcoweb_card_boot	eq	5.00
pcoweb_card_web	eq	2.2

References

github.com/cybertoxin/CVEs/blob/main/CVE_2020_18329.md

medium.com/%40SergiuSechel/insecure-permissions-in-rehau-group-unlimited-polymer-solutions-implementation-of-carel-pcoweb-514c148ae694