CVE-2020-18329

An issue was discovered in Rehau devices that use a pCOWeb card BIOS v6.27, BOOT v5.00, web version v2.2, allows attackers to gain full unauthenticated access to the configuration and service interface.

Score

CVSS 3.1 7.5 High

Status

Modified - cve@mitre.org

Published

2023-01-26

Last modified

2025-04-02

Weaknesses

CWE-281

Affected products

• Pcoweb Card Bios (Carel)
• Pcoweb Card Boot (Carel)
• Pcoweb Card Web (Carel)

References

• https://github.com/cybertoxin/CVEs/blob/main/CVE_2020_18329.md
• https://medium.com/%40SergiuSechel/insecure-permissions-in-rehau-group-unlimited-polymer-solutions-implementation-of-ca…