High · 8.8 CVE-2020-12511 EUVD-2020-4813GHSA-whqx-xf73-2457

Pepper+Fuchs Comtrol IO-Link Master Cross-Site Request Forgery

Published Jan 22, 2021 · Updated Sep 17, 2024 · Assigned by CERTVDE

Description

Pepperl+Fuchs Comtrol IO-Link Master in Version 1.5.48 and below is prone to a Cross-Site Request Forgery (CSRF) in the web interface.

Vendor	Product	Affected	Fixed
Pepper+Fuchs	Comtrol IO-Link Master	unspecified – ≤ 1.5.48	—

CNA	v3.1	8.8
EUVD	v3.1	8.8