CVE-2020-12518

5.5 mediumEPSS 0.7%

Medium (5.5) in phoenixcontact plcnext firmware. EPSS 0.7% chance of exploitation in the next 30 days.

On Phoenix Contact PLCnext Control Devices versions before 2021.0 LTS an attacker can use the knowledge gained by reading the insufficiently protected sensitive information to plan further attacks.

Severity

CVSS 3.1

5.5 medium

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

EPSS: 0.7% chance of exploitation in the next 30 days; higher than 54% of CVEs (scores of 2026-10-31)
CWE: CWE-200
Published: 2020-12-17
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

phoenixcontact:plcnext_firmware

References

https://cert.vde.com/en-us/advisories/vde-2020-049
https://cert.vde.com/en-us/advisories/vde-2020-049

Check your stack JSON