cve/2020/CVE-2020-12504.md

### [CVE-2020-12504](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-12504)
![](https://img.shields.io/static/v1?label=Product&message=JetNet&color=blue)
![](https://img.shields.io/static/v1?label=Product&message=P%2BF%20Comtrol%20RocketLinx%20&color=blue)
![](https://img.shields.io/static/v1?label=Product&message=P%2BF%20Comtrol%20RocketLinx&color=blue)
![](https://img.shields.io/static/v1?label=Product&message=PMI-110-F2G&color=blue)
![](https://img.shields.io/static/v1?label=Version&message=%3C%20V1.8%20&color=brighgreen)
![](https://img.shields.io/static/v1?label=Version&message=5428G-20SFP%3C%3D%20V1.0%20&color=brighgreen)
![](https://img.shields.io/static/v1?label=Version&message=ES8509-XT%2C%20ES8510-XT%2C%20ES9528-XTv2%2C%20ES7506%2C%20ES7510%2C%20ES7528%2C%20ES8508%2C%20ES8508F%2C%20%20ES8510-XTE%2C%20ES9528%2FES9528-XT%3D%20all%20&color=brighgreen)
![](https://img.shields.io/static/v1?label=Version&message=ICRL-M-8RJ45%2F4SFP-G-DIN%3C%3D%201.2.3%20&color=brighgreen)
![](https://img.shields.io/static/v1?label=Vulnerability&message=CWE-912%20Hidden%20Functionality&color=brighgreen)

### Description

Improper Authorization vulnerability of Pepperl+Fuchs P+F Comtrol RocketLinx ES7510-XT, ES8509-XT, ES8510-XT, ES9528-XTv2, ES7506, ES7510, ES7528, ES8508, ES8508F, ES8510, ES8510-XTE, ES9528/ES9528-XT (all versions) and ICRL-M-8RJ45/4SFP-G-DIN, ICRL-M-16RJ45/4CP-G-DIN FW 1.2.3 and below has an active TFTP-Service.

### POC

#### Reference
- http://packetstormsecurity.com/files/162903/Korenix-CSRF-Backdoor-Accounts-Command-Injection-Missing-Authentication.html
- http://packetstormsecurity.com/files/162903/Korenix-CSRF-Backdoor-Accounts-Command-Injection-Missing-Authentication.html
- http://packetstormsecurity.com/files/165875/Korenix-Technology-JetWave-CSRF-Command-Injection-Missing-Authentication.html
- http://packetstormsecurity.com/files/165875/Korenix-Technology-JetWave-CSRF-Command-Injection-Missing-Authentication.html
- http://seclists.org/fulldisclosure/2021/Jun/0
- http://seclists.org/fulldisclosure/2021/Jun/0
- https://cert.vde.com/en-us/advisories/vde-2020-053
- https://cert.vde.com/en-us/advisories/vde-2020-053
- https://sec-consult.com/vulnerability-lab/advisory/multiple-critical-vulnerabilities-in-korenix-technology-westermo-pepperl-fuchs/
- https://sec-consult.com/vulnerability-lab/advisory/multiple-critical-vulnerabilities-in-korenix-technology-westermo-pepperl-fuchs/

#### Github
- https://github.com/ARPSyndicate/cvemon