CVSS 3.1
5.4 mediumCVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:NCVE-2020-12512
Medium (5.4) in pepperl-fuchs. EPSS 0.7% chance of exploitation in the next 30 days.
Pepperl+Fuchs Comtrol IO-Link Master in Version 1.5.48 and below is prone to an authenticated reflected POST Cross-Site Scripting
Severity
- EPSS
- 0.7% chance of exploitation in the next 30 days; higher than 54% of CVEs (scores of 2026-10-31)
- CWE
- CWE-79
- Published
- Modified
- Record from
- the NVD, synced
Affected
- pepperl-fuchs:io-link_master_4-eip_firmware
- pepperl-fuchs:io-link_master_4-pnio_firmware
- pepperl-fuchs:io-link_master_8-eip-l_firmware
- pepperl-fuchs:io-link_master_8-eip_firmware
- pepperl-fuchs:io-link_master_8-pnio-l_firmware
- pepperl-fuchs:io-link_master_8-pnio_firmware
- pepperl-fuchs:io-link_master_dr-8-eip-p_firmware
- pepperl-fuchs:io-link_master_dr-8-eip-t_firmware
- pepperl-fuchs:io-link_master_dr-8-eip_firmware
- pepperl-fuchs:io-link_master_dr-8-pnio-p_firmware
- pepperl-fuchs:io-link_master_dr-8-pnio-t_firmware
- pepperl-fuchs:io-link_master_dr-8-pnio_firmware