Resource exhaustion in Phoenix Contact Btp Touch Panel
CVE-2020-12524
Uncontrolled Resource Consumption can be exploited to cause the Phoenix Contact HMIs BTP 2043W, BTP 2070W and BTP 2102W in all versions to become unresponsive and not accurately update the display content (Denial of Service).
Vulnerability class: DoS (Denial of Service)
EPSS: 0.011 (61.4th percentile) — read the EPSS interpretation.
CVSS v3 metric
CVSS v3 base score 7.5 (High). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H.
Affected products
- Phoenix Contact Btp Touch Panel — versions BTP 2043W (1050387) all versions, BTP 2070W (1046666) all versions, BTP 2102W (1046667) all versions
- Phoenixcontact Btp_2043w
- Phoenixcontact Btp_2043w_firmware
- Phoenixcontact Btp_2070w
- Phoenixcontact Btp_2070w_firmware
- Phoenixcontact Btp_2102w
- Phoenixcontact Btp_2102w_firmware
Weakness classification (CWE)
References
- info@cert.vde.com (x_refsource_CONFIRM, Third Party Advisory)
Frequently asked questions
- What is CVE-2020-12524?
- CVE-2020-12524 is a high-severity vulnerability in Phoenix Contact Btp Touch Panel, classified under Uncontrolled Resource Consumption. CVSS score: 7.5/10. Published 2020-12-02.
- How severe is CVE-2020-12524?
- High severity. CVSS v3 base score is 7.5 out of 10.