High severity · published Nov 19, 2020
CVE-2020-12495
Endress+Hauser Ecograph T (Neutral/Private Label) (RSG35, ORSG35) with Firmware version prior to V2.0.0 is prone to improper privilege management
8.8
CVSS
0.9%
EPSS
No
On KEV
Description
Endress+Hauser Ecograph T (Neutral/Private Label) (RSG35, ORSG35) with Firmware version prior to V2.0.0 is prone to improper privilege management. The affected device has a web-based user interface with a role-based access system. Users with different roles have different write and read privileges. The access system is based on dynamic "tokens". The vulnerability is that user sessions are not closed correctly and a user with fewer rights is assigned the higher rights when he logs on.
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Attack vector
Network
Complexity
Low
Privileges
Low
User interaction
None
Confidentiality
High
Integrity
High
Availability
High
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)0.9% · higher than 60% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
OF
Orsg35 Firmware · Endress
before 2.0.0 · source: NVD
OF
Orsg45 Firmware · Endress
before 2.0.0 · source: NVD
RF
Rsg35 Firmware · Endress
before 2.0.0 · source: NVD
RF
Rsg45 Firmware · Endress
before 2.0.0 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2020-12495
CVE.org
https://www.cve.org/CVERecord?id=CVE-2020-12495
Vendor Advisory
https://cert.vde.com/en-us/advisories/vde-2020-021
More from Orsg35 Firmware
6.5
CVE-2020-12496
Endress+Hauser Ecograph T (Neutral/Private Label) (RSG35, ORSG35) and Memograph M (Neutral/Private Label) (RSG45, ORSG45) with Firmware version V2.0.0 and above is prone to…