{"id":"CVE-2020-12524","aliases":["EUVD-2020-4826","GHSA-55qw-8gmw-8c9w"],"status":"published","title":"Phoenix Contact BTP Touch Panels uncontrolled resource consumption","description":"Uncontrolled Resource Consumption can be exploited to cause the Phoenix Contact HMIs BTP 2043W, BTP 2070W and BTP 2102W in all versions to become unresponsive and not accurately update the display content (Denial of Service).","severity":{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-11","score":0.01083,"percentile":0.65622,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-400"],"published":"2020-12-02T14:39:20Z","modified":"2026-06-17T02:51:58Z","products":[{"vendor":"phoenix contact","product":"btp touch panel"},{"vendor":"phoenixcontact","product":"btp_2043w_firmware"},{"vendor":"phoenixcontact","product":"btp_2070w_firmware"},{"vendor":"phoenixcontact","product":"btp_2102w_firmware"}],"references":[{"url":"https://cert.vde.com/en-us/advisories/vde-2020-047","tags":["x_refsource_CONFIRM","x_transferred","Third Party Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2020-12524"},{"url":"https://github.com/advisories/GHSA-55qw-8gmw-8c9w"}],"sources":{"cve":[{"id":"CVE-2020-12524","title":"Phoenix Contact BTP Touch Panels uncontrolled resource consumption","description":"Uncontrolled Resource Consumption can be exploited to cause the Phoenix Contact HMIs BTP 2043W, BTP 2070W and BTP 2102W in all versions to become unresponsive and not accurately update the display content (Denial of Service).","status":"published","published":"2020-12-02T14:39:20.197Z","modified":"2024-09-17T03:58:57.99Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high","assessor":"cna"}],"cwes":["CWE-400"],"updated_at":"2026-11-02T14:35:52.925152Z"}],"euvd":[{"id":"EUVD-2020-4826","description":"Uncontrolled Resource Consumption can be exploited to cause the Phoenix Contact HMIs BTP 2043W, BTP 2070W and BTP 2102W in all versions to become unresponsive and not accurately update the display content (Denial of Service).","status":"published","published":"2020-12-02T14:39:20Z","modified":"2024-09-17T03:58:57Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-03T00:28:27.115818Z"}],"ghsa":[{"id":"GHSA-55qw-8gmw-8c9w","title":"Uncontrolled Resource Consumption can be exploited to cause the Phoenix Contact HMIs BTP 2043W,...","description":"Uncontrolled Resource Consumption can be exploited to cause the Phoenix Contact HMIs BTP 2043W, BTP 2070W and BTP 2102W in all versions to become unresponsive and not accurately update the display content (Denial of Service).","status":"published","published":"2022-05-24T17:35:06Z","modified":"2023-01-29T05:04:49Z","cwes":["CWE-400"],"updated_at":"2026-11-02T14:45:38.830072Z"}],"nvd":[{"id":"CVE-2020-12524","description":"Uncontrolled Resource Consumption can be exploited to cause the Phoenix Contact HMIs BTP 2043W, BTP 2070W and BTP 2102W in all versions to become unresponsive and not accurately update the display content (Denial of Service).","status":"published","published":"2020-12-02T15:15:12.173Z","modified":"2026-06-17T02:51:58.273Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high","assessor":"secondary"},{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high","assessor":"primary"},{"version":"2.0","score":5,"vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","level":"medium","assessor":"primary"}],"cwes":["CWE-400"],"updated_at":"2026-11-02T14:06:25.394006Z"}]}}