CVE-2020-12514
Pepper+Fuchs Comtrol IO-Link Master NULL Pointer Dereference
MEDIUM
4.9
CVSS Score
Published: January 22, 2021 at 07:01 PM UTC
Updated: June 17, 2026 at 02:51 AM UTC
25 products affected across 2 vendorsIo Link Master 8-pnio FirmwareIo Link Master 8-pnio L FirmwareIo Link Master 8-eip L Firmware
Using Comtrol IO-Link Master by Pepper+Fuchs?
Get instant alerts when new vulnerabilities affect Comtrol IO-Link Master - before attackers find them.
Real-time alertsTrack your software stackFree plan available
Severity
MEDIUM4.9
Exploit prediction
EPSS 1%
Description
Pepperl+Fuchs Comtrol IO-Link Master in Version 1.5.48 and below is prone to a NULL Pointer Dereference that leads to a DoS in discoveryd
Affected
Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.
v ≤ 1.5.48
pepperl-fuchs-io-link-master-4-eip (same device)
v ≤ 1.5.48
pepperl-fuchs-io-link-master-4-pnio (same device)
v ≤ 1.5.48
pepperl-fuchs-io-link-master-8-eip (same device)
v ≤ 1.5.48
pepperl-fuchs-io-link-master-8-eip-l (same device)
v ≤ 1.5.48
pepperl-fuchs-io-link-master-8-pnio (same device)
v ≤ 1.5.48
pepperl-fuchs-io-link-master-8-pnio-l (same device)
v ≤ 1.5.48
pepperl-fuchs-io-link-master-dr-8-eip (same device)
v ≤ 1.5.48
pepperl-fuchs-io-link-master-dr-8-eip-p (same device)
v ≤ 1.5.48
pepperl-fuchs-io-link-master-dr-8-eip-t (same device)
v ≤ 1.5.48
pepperl-fuchs-io-link-master-dr-8-pnio (same device)
Remediation
No guide yetNo remediation guidance has been written for this CVE yet, and no fixed version or vendor advisory is recorded against it.
References (1)
x_refsource_CONFIRMThird Party Advisory
Source: [email protected]
https://cert.vde.com/en-us/advisories/vde-2020-038CVSS
- Attack Vector
- NETWORK
- Complexity
- LOW
- Privileges
- HIGH
- User Interaction
- NONE
- Scope
- UNCHANGED
- Confidentiality
- NONE
- Integrity
- NONE
- Availability
- HIGH
Vector?
Quick Info
StatusMODIFIED
CWE
CWE-476
Get alerted
Stop reading CVE feeds looking for your own stack
Track the products you run and VulnTracker tells you when a new CVE affects them — with what is known about fixing it, and nothing about the rest.
Free plan, no card