Back to Database
Status published
High
CVE-2020-12524
Phoenix Contact BTP Touch Panels uncontrolled resource consumption
Vulnerability Description
Uncontrolled Resource Consumption can be exploited to cause the Phoenix Contact HMIs BTP 2043W, BTP 2070W and BTP 2102W in all versions to become unresponsive and not accurately update the display content (Denial of Service).
Impact Analysis
Refer to official advisory for detailed impact metrics.
Remediation
Ensure systems are updated to the latest vendor-supplied patch levels.
THREAT MONITOR
Am I Vulnerable?
Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2020-12524
Credits & Attribution
The following person or organization is credited with identifying this vulnerability, as recorded in the NVD database:
- This vulnerability was discovered by Richard Thomas and Tom Chothia of University of Birmingham.
More from Phoenix Contact
View All →CVE-2025-41752
Reflected XSS vulnerability in pxc_portSfp.php
High
7.1
CVE-2025-41751
Reflected XSS vulnerability in pxc_portCntr.php
High
7.1
CVE-2025-41750
Reflected XSS vulnerability in pxc_PortCfg.php
High
7.1
CVE-2025-41749
Reflected XSS vulnerability in port_util.php
High
7.1
CVE-2025-41748
Reflected XSS vulnerability in pxc_Dot1xCfg.php
High
7.1
Affected Vendor
Phoenix Contact
View all reports →Affected Software
BTP Touch Panel
Vulnerable Versions:
BTP 2043W (1050387) all versions, BTP 2070W (1046666) all versions, BTP 2102W (1046667) all versions
Timeline
Official Publish:
December 2nd, 2020
Last Modified:
September 17th, 2024
Added to House:
July 21st, 2026
CVSS Vectors
V3:
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H