CVE-2020-10630

SAE IT-systems FW-50 Remote Telemetry Unit (RTU). The software does not neutralize or incorrectly neutralizes user-controllable input before it is placed in the output used as a webpage that is served to other users.

• CWE-79
• CWE-79

• https://www.us-cert.gov/ics/advisories/ICSA2012602Mitigation, Third Party Advisory, US Government Resource
• https://www.us-cert.gov/ics/advisories/ICSA2012602Mitigation, Third Party Advisory, US Government Resource

Published

May 5, 2020

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2020-10625WebAccess/NMS (versions prior to 3.0.2) allows an unauthenti…9.8
• CVE-2020-10626In Fazecast jSerialComm, Version 2.2.2 and prior, an uncontr…7.8
• CVE-2020-10627Insulet Omnipod Insulin Management System insulin pump produ…8.1
• CVE-2020-10628ControlEdge PLC (R130.2, R140, R150, and R151) and RTU (R101…7.5
• CVE-2020-10629WebAccess/NMS (versions prior to 3.0.2) does not sanitize XM…7.5
• CVE-2020-1063A cross site scripting vulnerability exists when Microsoft D…5.4
• CVE-2020-10631An attacker could use a specially crafted URL to delete or r…9.8
• CVE-2020-10632Inadequate folder security permissions in Emerson OpenEnterp…5.3
• CVE-2020-10633A non-persistent XSS (cross-site scripting) vulnerability ex…6.1
• CVE-2020-10634SAE IT-systems FW-50 Remote Telemetry Unit (RTU). A speciall…9.1
• CVE-2020-10635Simulation models for KUKA.Sim Pro version 3.1 are hosted by…4.3
• CVE-2020-10636Inadequate encryption may allow the passwords for Emerson Op…7.5