Contemporary Controls BASC 20T

aruschman

Apr 09, 2026

Release Date

April 09, 2026

Description

View CSAF

Summary

Successful exploitation of this vulnerability could allow an attacker to enumerate the functionality of each component associated with the PLC, reconfigure, rename, delete, perform file transfers, and make remote procedure calls.

The following versions of Contemporary Controls BASC 20T are affected:

BASControl20 3.1 (CVE-2025-13926)

CVSS Vendor Equipment Vulnerabilities

v3 9.8 Contemporary Controls Sedona Alliance Contemporary Controls BASC 20T Reliance on Untrusted Inputs in a Security Decision

Background

Critical Infrastructure Sectors: Commercial Facilities, Critical Manufacturing, Energy

Countries/Areas Deployed: Worldwide

Company Headquarters Location: United States

Vulnerabilities

Expand All +

CVE-2025-13926

An attacker could use data obtained by sniffing the network traffic to forge packets in order to make arbitrary requests to Contemporary Controls BASC 20T.

View CVE…