CVE-2020-8768 - An issue was discovered on Phoenix Contact Emalytics Controller ILC 2050 BI before 1.2.3 and BI-L before 1.2.3 devices

Back Back to CVE browser

CRITICAL

An issue was discovered on Phoenix Contact Emalytics Controller ILC 2050 BI before 1.2.3 and BI-L before 1.2.3 devices

Published Feb 17, 2020

9.4

CRITICAL

CVSS 3.1

EPSS 1.85%

Description

An issue was discovered on Phoenix Contact Emalytics Controller ILC 2050 BI before 1.2.3 and BI-L before 1.2.3 devices. There is an insecure mechanism for read and write access to the configuration of the device. The mechanism can be discovered by examining a link on the website of the device.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-732

Incorrect Permission Assignment

References (3)

https://cert.vde.com/de-de/advisories/vde-2020-001
x_refsource_MISCThird Party Advisory
https://euvd.enisa.europa.eu/vulnerability/EUVD-2020-29616
Advisory
https://www.us-cert.gov/ics/advisories/icsa-20-063-02
x_refsource_MISCThird Party AdvisoryUS Government Resource

Link	Providers	Tags
https://cert.vde.com/de-de/advisories/vde-2020-001		x_refsource_MISCThird Party Advisory
https://euvd.enisa.europa.eu/vulnerability/EUVD-2020-29616		Advisory
https://www.us-cert.gov/ics/advisories/icsa-20-063-02		x_refsource_MISCThird Party AdvisoryUS Government Resource

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner mitre

Published Feb 17, 2020

Updated Aug 4, 2024

Reserved Feb 6, 2020

Link CVE-2020-8768

CISA Vulnrichment

No data

NVD

Status Modified

Modified Jun 17, 2026

Link CVE-2020-8768

Red Hat

No data

ENISA EUVD

Assigner mitre

Published Feb 17, 2020

Updated Aug 4, 2024

Link EUVD-2020-29616

GitHub

No data