Vulnerability Details CVE-2020-12499
In PHOENIX CONTACT PLCnext Engineer version 2020.3.1 and earlier an improper path sanitation vulnerability exists on import of project files.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.001
EPSS Ranking 27.7%
CVSS Severity
CVSS v3 Score 8.2
CVSS v2 Score 4.4
References
Products affected by CVE-2020-12499
-
cpe:2.3:a:phoenixcontact:plcnext_engineer:-
-
cpe:2.3:a:phoenixcontact:plcnext_engineer:2020-3-1