Phoenix Contact PLCnext Control Devices versions before 2021.0 LTS: An attacker can use this vulnerability i.e. to open a reverse shell with root privileges.

8.8 CVSS

Vulnerability Description

On Phoenix Contact PLCnext Control Devices versions before 2021.0 LTS an attacker can use this vulnerability i.e. to open a reverse shell with root privileges.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2020-12519

Check My Exposure

Credits & Attribution

The following person or organization is credited with identifying this vulnerability, as recorded in the NVD database:

Discovered by Patrick Muench, Torsten Loebner, Maurice Rothe, Pascal Keul and Daniel Hackel of SVA Systemvertrieb Alexander GmbH, coordinated by CERT@VDE

References

https://cert.vde.com/en-us/advisories/vde-2020-049

More from Phoenix Contact

View All →

CVE-2025-41752

Reflected XSS vulnerability in pxc_portSfp.php

High 7.1

CVE-2025-41751

Reflected XSS vulnerability in pxc_portCntr.php

High 7.1

CVE-2025-41750

Reflected XSS vulnerability in pxc_PortCfg.php

High 7.1

CVE-2025-41749

Reflected XSS vulnerability in port_util.php

High 7.1

CVE-2025-41748

Reflected XSS vulnerability in pxc_Dot1xCfg.php

High 7.1

Affected Vendor

Phoenix Contact

View all reports →

Affected Software

AXC F 1152 (1151412), AXC F 2152 (2404267), AXC F 3152 (1069208), RFC 4072S (1051328, AXC F 2152 Starterkit (1046568), PLCnext Technology Starterkit (1188165)

Vulnerable Versions:

unspecified