Resource exhaustion in Phoenix Contact Btp Touch Panel
CVE-2020-12524
Uncontrolled Resource Consumption can be exploited to cause the Phoenix Contact HMIs BTP 2043W, BTP 2070W and BTP 2102W in all versions to become unresponsive and not accurately update the display content (Denial of Service).
Vulnerability class: DoS (Denial of Service)
Published · last modified .
CVSS v3 metric
CVSS v3 base score 7.5 (High). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H.
EPSS exploit prediction
EPSS: 0.011 (63.8th percentile), scored .
Low probability of exploitation in the next 30 days, but still tracked. 64th percentile — 63.8% of CVEs in the catalogue have a lower EPSS than this one. How to read EPSS.
EPSS over last 30 days · oldest: 0.011 · newest: 0.011 · change: 0.000
Affected products
- Phoenix Contact Btp Touch Panel — versions BTP 2043W (1050387) all versions, BTP 2070W (1046666) all versions, BTP 2102W (1046667) all versions
- Phoenixcontact Btp 2043w
- Phoenixcontact Btp 2043w Firmware
- Phoenixcontact Btp 2070w
- Phoenixcontact Btp 2070w Firmware
- Phoenixcontact Btp 2102w
- Phoenixcontact Btp 2102w Firmware
Weakness classification (CWE)
References
- cert.vde.com/en-us/advisories/vde-2020-047 (Third Party Advisory)
Frequently asked questions
- What is CVE-2020-12524?
- CVE-2020-12524 is a high-severity vulnerability in Phoenix Contact Btp Touch Panel, classified under Uncontrolled Resource Consumption. CVSS score: 7.5/10. Published 2020-12-02.
- How severe is CVE-2020-12524?
- High severity. CVSS v3 base score is 7.5 out of 10.