35 matches found
CVE-2020-12513
Pepperl+Fuchs Comtrol IO-Link Master Series is affected by CVE-2020-12513. Vulnerable versions include System 1.36 and Application 1.5.28 (and 1.5.48 and earlier per CVE listing) with an authenticated blind OS Command Injection. Fixed versions are System 1.52 and Application 1.6.11. The vulnerabi...
CVE-2020-12512 Pepper+Fuchs Comtrol IO-Link Master Cross-Site Scripting
Pepperl+Fuchs Comtrol IO-Link Master in Version 1.5.48 and below is prone to an authenticated reflected POST Cross-Site Scripting...
PT-2021-9462
Name of the Vulnerable Software and Affected Versions Pepperl+Fuchs Comtrol IO-Link Master versions 1.5.48 and below Description The issue is related to a NULL Pointer Dereference that can cause a Denial of Service DoS in the discoveryd component. Recommendations For versions 1.5.48 and below,...
CVE-2020-12513: Improper Neutralization of Special Elements used in an OS Command
Pepperl+Fuchs Comtrol IO-Link Master in Version 1.5.48 and below is prone to an authenticated blind OS Command Injection...
PT-2021-9461
Name of the Vulnerable Software and Affected Versions Pepperl+Fuchs Comtrol IO-Link Master versions 1.5.48 and below Description The issue is related to an authenticated blind OS Command Injection. This means that an attacker who has authentication credentials can potentially inject operating...
PT-2021-9460
Name of the Vulnerable Software and Affected Versions Pepperl+Fuchs Comtrol IO-Link Master versions 1.5.48 and below Description The issue is related to an authenticated reflected POST Cross-Site Scripting. This means that an attacker could potentially inject malicious scripts into the website,...
CVE-2020-12512: Improper Neutralization of Input During Web Page Generation
Pepperl+Fuchs Comtrol IO-Link Master in Version 1.5.48 and below is prone to an authenticated reflected POST Cross-Site Scripting...
CVE-2020-12511: Cross-Site Request Forgery (CSRF)
Pepperl+Fuchs Comtrol IO-Link Master in Version 1.5.48 and below is prone to a Cross-Site Request Forgery CSRF in the web interface...
CVE-2020-12514: NULL Pointer Dereference
Pepperl+Fuchs Comtrol IO-Link Master in Version 1.5.48 and below is prone to a NULL Pointer Dereference that leads to a DoS in discoveryd...
PT-2021-9459
Name of the Vulnerable Software and Affected Versions Pepperl+Fuchs Comtrol IO-Link Master versions 1.5.48 and below Description The issue is related to a Cross-Site Request Forgery CSRF in the web interface. This means an attacker could potentially trick a user into performing unintended actions...
Pepperl Fuchs IO-link Master Series Operating System Command Injection Vulnerability
The Pepperl Fuchs IO-link Master Series is a series of industrial devices for managing communications between sensors and controllers from Pepperl Fuchs, Germany. The devices can be used in a gateway function between Ethernet and IO-Link, facilitating reliable and efficient communication between...
Pepperl Fuchs IO-Link Master Series Cross-Site Request Forgery Vulnerability
The Pepperl Fuchs IO-link Master Series is a series of industrial devices for managing communications between sensors and controllers from Pepperl Fuchs, Germany. The devices can be used in a gateway function between Ethernet and IO-Link, facilitating reliable and efficient communication between...
Pepperl Fuchs IO-link Master Series Cross-Site Scripting Vulnerability
The Pepperl Fuchs IO-link Master Series is a series of industrial devices for managing communications between sensors and controllers from Pepperl Fuchs, Germany. The devices can be used in a gateway function between Ethernet and IO-Link, facilitating reliable and efficient communication between...
Pepperl Fuchs IO-link Master Series Product Code Issue Vulnerability
The Pepperl Fuchs IO-link Master Series is a series of industrial devices for managing communications between sensors and controllers from Pepperl Fuchs, Germany. The devices can be used in a gateway function between Ethernet and IO-Link, facilitating reliable and efficient communication between...
