title: Pepperl+Fuchs improper authorization affects multiple Comtrol RocketLinx products
description: Improper Authorization vulnerability of Pepperl+Fuchs P+F Comtrol RocketLinx ES7510-XT, ES8509-XT, ES8510-XT, ES9528-XTv2, ES7506, ES7510, ES7528, ES8508, ES8508F, ES8510, ES8510-XTE, ES9528/ES9528-XT (all versions) and ICRL-M-8RJ45/4SFP-G-DIN, ICRL-M-16RJ45/4CP-G-DIN FW 1.2.3 and below is prone to unauthenticated device administration.
problem types: CWE-352 Cross-Site Request Forgery (CSRF)
affected:
{
product: P+F Comtrol RocketLinx
vendor: Pepperl+Fuchs
versions:
status: affected, version: ES8509-XT, ES8510-XT, ES9528-XTv2, ES7506, ES7510, ES7528, ES8508, ES8508F,  ES8510-XTE, ES9528/ES9528-XT all
lessThan: 2.1.1, status: affected, version: ES7510-XT, versionType: custom
lessThan: 3.1.1, status: affected, version: ES8510, versionType: custom
}
{
product: P+F Comtrol RocketLinx
vendor: Pepperl+Fuchs
versions:
lessThanOrEqual: 1.2.3, status: affected, version: ICRL-M-8RJ45/4SFP-G-DIN, versionType: custom
lessThanOrEqual: 1.2.3, status: affected, version: ICRL-M-16RJ45/4CP-G-DIN, versionType: custom
}
{
product: JetNet
vendor: Korenix
versions:
lessThanOrEqual: V1.0, status: affected, version: 5428G-20SFP, versionType: custom
lessThanOrEqual: V1.1, status: affected, version: 5810G, versionType: custom
lessThanOrEqual: V2.3b, status: affected, version: 4706F, versionType: custom
lessThanOrEqual: V3.0b, status: affected, version: 4510, versionType: custom
lessThan: V1.6, status: affected, version: 5310, versionType: custom
}
{
product: PMI-110-F2G
vendor: Westermo
versions:
lessThan: V1.8, status: affected, version: unspecified, versionType: custom
}
metrics:
cvssV3_1: [
attackComplexity: LOW
attackVector: NETWORK
availabilityImpact: HIGH
baseScore: 8.8
baseSeverity: HIGH
confidentialityImpact: HIGH
integrityImpact: HIGH
privilegesRequired: NONE
scope: UNCHANGED
userInteraction: REQUIRED
vectorString: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
version: 3.1
]
solutions: An external protective measure is required.
1) Traffic from untrusted networks to the device should be blocked by a firewall. Especially
traffic targeting the administration webpage.
2) Administrator and user access should be protected by a secure password and only be
available to a very limited group of people.