PT-2020-12436 · Phoenix Contact · Pc Worx Srt

Sharon Brizinov · Published 2020-03-27 · Updated 2021-07-21 · CVE-2020-10939

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions PHOENIX CONTACT PC WORX SRT versions 1.14 and earlier

Description The issue is related to insecure default path permissions, which can be exploited for local privilege escalation.

Recommendations For PHOENIX CONTACT PC WORX SRT versions 1.14 and earlier, update to a version that addresses the insecure default path permissions issue to prevent local privilege escalation.

Fix

Incorrect Default Permissions

Weakness Enumeration

CWE-276

Related Identifiers

CVE-2020-10939

Affected Products

Pc Worx Srt

References · 4

• https://nvd.nist.gov/vuln/detail/CVE-2020-10939 · Security Note
• https://osv.dev/vulnerability/CVE-2020-10939 · Vendor Advisory
• https://cert.vde.com/en-us/advisories/vde-2020-012 · Note
• https://t.me/cvenotify/2248 · Telegram Post