Is CVE-2020-11496 actively exploited?

No active exploitation of CVE-2020-11496 has been confirmed so far. Continue monitoring, as exploit status can change.

Can CVE-2020-11496 be exploited remotely?

No. CVE-2020-11496 requires local access to exploit.

What is the CVSS score of CVE-2020-11496?

CVE-2020-11496 has a CVSS score of 6.7 (MEDIUM).

HOME VULNERABILITIESCVE-2020-11496

MEDIUM

CVE-2020-11496

CWE-20Published: October 19, 2020· Updated: Jun 17, 2026

6.7

CVSS v3.1

Official Description

Sprecher SPRECON-E firmware prior to 8.64b might allow local attackers with access to engineering data to insert arbitrary code. This firmware lacks the validation of the input values on the device side, which is provided by the engineering software during parameterization. Attackers with access to local configuration files can therefore insert malicious commands that are executed after compiling them to valid parameter files (“PDLs”), transferring them to the device, and restarting the device.

NVD Source

Technical Analysis

CVE-2020-11496 requires local access, meaning attackers must already have a foothold on the target system.

Exploitation requires high privileges, which limits the exposure to scenarios where an attacker has already gained initial access.

A successful exploit results in complete confidentiality breach (data exposure), full integrity compromise (data manipulation), availability disruption (denial of service), with a CVSS base score of 6.7.