CVE-2020-12493

An open port used for debugging in SWARCOs CPU LS4000 Series with versions starting with G4... grants root access to the device without access control via network. A malicious user could use this vulnerability to get access to the device and disturb operations with connected devices.

• CWE-284

• https://cert.vde.com/de-de/advisories/vde-2020-016Third Party Advisory
• https://cert.vde.com/de-de/advisories/vde-2020-016Third Party Advisory

Published

May 29, 2020

Last Modified

Jun 17, 2026

Status

Modified

• Uncovering a hidden BOLA in Appsmith's snapshot logicStrix autonomously discovered a BOLA/IDOR vulnerability in Appsmith's snapshot deletion path.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2020-12485The frame touch module does not make validity judgments on p…5.5
• CVE-2020-12487Due to the flaws in the verification of input parameters, th…7
• CVE-2020-12488The attacker can access the sensitive information stored wit…5.5
• CVE-2020-1249An elevation of privilege vulnerability exists when the Wind…7.8
• CVE-2020-12491Improper control of framework service permissions with possi…4.8
• CVE-2020-12492Improper handling of WiFi information by framework services …1
• CVE-2020-12494Beckhoff's TwinCAT RT network driver for Intel 8254x and 825…5.3
• CVE-2020-12495Endress+Hauser Ecograph T (Neutral/Private Label) (RSG35, OR…8.8
• CVE-2020-12496Endress+Hauser Ecograph T (Neutral/Private Label) (RSG35, OR…6.5
• CVE-2020-12497PLCopen XML file parsing in Phoenix Contact PC Worx and PC W…7.8
• CVE-2020-12498mwe file parsing in Phoenix Contact PC Worx and PC Worx Expr…7.8
• CVE-2020-12499In PHOENIX CONTACT PLCnext Engineer version 2020.3.1 and ear…7.3