High · 7.5 CVE-2020-18329 EUVD-2020-10253GHSA-5ccq-w6wj-jcqq

An issue was discovered in Rehau devices that use a pCOWeb card BIOS v6.27, BOOT v5.00, web version v2.2, allows attackers to gain full una…

Published Jan 25, 2023 · Updated Apr 2, 2025 · Assigned by mitre

Description

An issue was discovered in Rehau devices that use a pCOWeb card BIOS v6.27, BOOT v5.00, web version v2.2, allows attackers to gain full unauthenticated access to the configuration and service interface.

References

https://medium.com/%40SergiuSechel/insecure-permissions-in-rehau-group-unlimited-polymer-solutions-implementation-of-carel-pcoweb-514c148ae694
https://github.com/cybertoxin/CVEs/blob/main/CVE_2020_18329.md