CVE-2020-12499

—

CVSS 3.1

7.3 high

EPSS

<1%p33

Published

Jul 21, 2020 (Jul 21, 2020)

Modified

Jun 17, 2026

Description

In PHOENIX CONTACT PLCnext Engineer version 2020.3.1 and earlier an improper path sanitation vulnerability exists on import of project files.

Vendors: phoenixcontact
Products: plcnext engineer
Weakness: CWE-22
Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (0.4%)

In the news0 stories

No ingested article mentions this CVE yet.