CVE:CVE-2020-12511
CNNVD:CNNVD-202101-1062
Pepperl Fuchs IO-link Master Series是德国Pepperl Fuchs公司的一系列用于管理传感器与控制器之间通信的工业设备。该设备可用于以太网和 IO-Link 之间的网关功能，助于在管理级别与传感器/执行器级别之间进行可靠、高效的通信。
Pepperl+Fuchs IO-Link Master Series 1.36存在跨站请求伪造漏洞，攻击者可利用该漏洞通过诱使受害者访问恶意网站。
solution:Upgrade pepperl-fuchs io-link_master_4-eip_firmware to a higher version than 1.5.48,and avoid the version (,1.5.48]; Upgrade pepperl-fuchs io-link_master_8-eip_firmware to a higher version than 1.5.48,and avoid the version (,1.5.48]; Upgrade pepperl-fuchs io-link_master_8-eip-l_firmware to a higher version than 1.5.48,and avoid the version (,1.5.48]; Upgrade pepperl-fuchs io-link_master_dr-8-eip_firmware to a higher version than 1.5.48,and avoid the version (,1.5.48]; Upgrade pepperl-fuchs io-link_master_dr-8-eip-p_firmware to a higher version than 1.5.48,and avoid the version (,1.5.48]; Upgrade pepperl-fuchs io-link_master_dr-8-eip-t_firmware to a higher version than 1.5.48,and avoid the version (,1.5.48]; Upgrade pepperl-fuchs io-link_master_4-pnio_firmware to a higher version than 1.5.48,and avoid the version (,1.5.48]; Upgrade pepperl-fuchs io-link_master_8-pnio_firmware to a higher version than 1.5.48,and avoid the version (,1.5.48]; Upgrade pepperl-fuchs io-link_master_8-pnio-l_firmware to a higher version than 1.5.48,and avoid the version (,1.5.48]; Upgrade pepperl-fuchs io-link_master_dr-8-pnio_firmware to a higher version than 1.5.48,and avoid the version (,1.5.48]; Upgrade pepperl-fuchs io-link_master_dr-8-pnio-p_firmware to a higher version than 1.5.48,and avoid the version (,1.5.48]; Upgrade pepperl-fuchs io-link_master_dr-8-pnio-t_firmware to a higher version than 1.5.48,and avoid the version (,1.5.48]