Password Manipulation Vulnerability in Pilz PMC Programming Tool by Pilz
CVE-2020-12067

7.5HIGH

Key Information:

Vendor

Pilz

Status
Pmc
Vendor
CVE Published:
26 December 2022

What is CVE-2020-12067?

The Pilz PMC programming tool, specifically in versions prior to 3.5.17, is susceptible to a security flaw that allows unauthorized password changes by an attacker, circumventing the need for the current password. This vulnerability poses significant risks as it enables potential malicious access and alterations to critical PLC programming settings, demanding immediate attention and remediation to secure sensitive data and maintain operational integrity.

References

https://cert.vde.com/en/advisories/VDE-2021-061/

CVSS V3.1

Score:
7.5
Severity:
HIGH
Confidentiality:
None
Integrity:
High
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.