Vulnerability · Published May 29, 2020 · Assigned by CERTVDE
CVE-2020-12493Critical Vulnerability in SWARCO CPU LS4000
Critical 10.0
In plain English
A critical-severity improper access control in CPU LS4000 from SWARCO. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 1.4% (higher than 73% of all known vulnerabilities).
Severity (CVSS 3.1)10.0Critical
Exploit odds (30 days)1.4%top 27.3% of all CVEs
Exploited in the wildNo reportsnot in CISA KEV
Attack toolingNoneno public tooling known
Official description
An open port used for debugging in SWARCOs CPU LS4000 Series with versions starting with G4... grants root access to the device without access control via network. A malicious user could use this vulnerability to get access to the device and disturb operations with connected devices.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| SWARCO | CPU LS4000 | Operating System G4... |
Weakness: CWE-284 · Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
References
- https://cert.vde.com/de-de/advisories/vde-2020-016 x_refsource_CONFIRM