Pepperl-fuchs Io-link Master 4-pnio Firmware — known CVE vulnerabilities

Every CVE whose affected-product data names Pepperl-fuchs Io-link Master 4-pnio Firmware, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (4)

• CVE-2020-12511 — CVSS 8.8 (high): Pepperl+Fuchs Comtrol IO-Link Master in Version 1.5.48 and below is prone to a Cross-Site Request Forgery (CSRF) in the web interface.
• CVE-2020-12512 — CVSS 7.5 (high): Pepperl+Fuchs Comtrol IO-Link Master in Version 1.5.48 and below is prone to an authenticated reflected POST Cross-Site Scripting
• CVE-2020-12513 — CVSS 7.5 (high): Pepperl+Fuchs Comtrol IO-Link Master in Version 1.5.48 and below is prone to an authenticated blind OS Command Injection.
• CVE-2020-12514 — CVSS 6.6 (medium): Pepperl+Fuchs Comtrol IO-Link Master in Version 1.5.48 and below is prone to a NULL Pointer Dereference that leads to a DoS in discoveryd