CVEDB API

ControlEdge PLC (R130.2, R140, R150, and R151) and RTU (R101, R110, R140, R150, and R151) exposes a session token on the network.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.001

EPSS Ranking 30.9%

CVSS Severity

CVSS v3 Score 7.5

CVSS v2 Score 5.0

References

Products affected by CVE-2020-10624

Honeywell » Controledge Plc » Version: N/A

cpe:2.3:h:honeywell:controledge_plc:-
Honeywell » Controledge Rtu » Version: N/A

cpe:2.3:h:honeywell:controledge_rtu:-
Honeywell » Controledge Plc Firmware » Version: r130.2

cpe:2.3:o:honeywell:controledge_plc_firmware:r130.2
Honeywell » Controledge Plc Firmware » Version: r140

cpe:2.3:o:honeywell:controledge_plc_firmware:r140
Honeywell » Controledge Plc Firmware » Version: r150

cpe:2.3:o:honeywell:controledge_plc_firmware:r150
Honeywell » Controledge Plc Firmware » Version: r151

cpe:2.3:o:honeywell:controledge_plc_firmware:r151
Honeywell » Controledge Rtu Firmware » Version: r101

cpe:2.3:o:honeywell:controledge_rtu_firmware:r101
Honeywell » Controledge Rtu Firmware » Version: r110

cpe:2.3:o:honeywell:controledge_rtu_firmware:r110
Honeywell » Controledge Rtu Firmware » Version: r140

cpe:2.3:o:honeywell:controledge_rtu_firmware:r140
Honeywell » Controledge Rtu Firmware » Version: r150

cpe:2.3:o:honeywell:controledge_rtu_firmware:r150
Honeywell » Controledge Rtu Firmware » Version: r151

cpe:2.3:o:honeywell:controledge_rtu_firmware:r151