Lucene search
K

585 matches found

CNVD
CNVD
added 2025/05/28 12:0 a.m.1 views

Siemens SCALANCE LPE9403 Denial of Service Vulnerability

Siemens SCALANCE LPE9403 is a local processing engine for industrial field data processing from Siemens. It is used to capture, collect and pre-process industrial field data. A denial of service vulnerability exists in the Siemens SCALANCE LPE9403, which stems from not properly validating Profine...

5.3CVSS6.5AI score0.00386EPSS
Exploits0References1
CNVD
CNVD
added 2025/05/28 12:0 a.m.1 views

Siemens SCALANCE LPE9403 Out-of-Bounds Read Vulnerability

Siemens SCALANCE LPE9403 is a local processing engine for industrial field data processing from Siemens. It is used to capture, collect and pre-process industrial field data. The Siemens SCALANCE LPE9403 suffers from an out-of-bounds read vulnerability due to the inability of an affected device t...

5.3CVSS6.5AI score0.00187EPSS
Exploits0References1
CNVD
CNVD
added 2025/05/28 12:0 a.m.1 views

Siemens SCALANCE LPE9403 Null Pointer Dereference Vulnerability

Siemens SCALANCE LPE9403 is a local processing engine for industrial field data processing from Siemens. It is used to capture, collect and pre-process industrial field data. The Siemens SCALANCE LPE9403 suffers from a null pointer dereference vulnerability due to an affected device failing to...

5.3CVSS6.5AI score0.0016EPSS
Exploits0References1
CNVD
CNVD
added 2025/05/28 12:0 a.m.2 views

Siemens SCALANCE LPE9403 Out-of-Bounds Read Vulnerability (CNVD-2025-17599)

Siemens SCALANCE LPE9403 is a local processing engine for industrial field data processing from Siemens. It is used to capture, collect and pre-process industrial field data. The siemens SCALANCE LPE9403 suffers from an out-of-bounds read vulnerability due to an affected device failing to properl...

5.3CVSS6.5AI score0.00187EPSS
Exploits0References1
Cvelist
Cvelist
added 2025/05/26 8:21 a.m.26 views

CVE-2025-41654 PEPPERL+FUCHS: Profinet Gateway LB8122A.1.EL – Device is affected by information disclosure via the SNMP protocol

An unauthenticated remote attacker can access information about running processes via the SNMP protocol. The amount of returned data can trigger a reboot by the watchdog...

8.2CVSS0.00388EPSS
Exploits0References1
CVE
CVE
added 2025/05/26 8:21 a.m.73 views

CVE-2025-41654

CVE-2025-41654 affects Pepperl+Fuchs Profinet Gateway LB8122A.1.EL and FB8122A.1.EL. An unauthenticated remote attacker can access information about running processes via SNMP, with the amount of returned data potentially triggering a watchdog reboot. Public documents confirm information disclosu...

8.2CVSS8.2AI score0.00388EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2025/05/26 8:21 a.m.7 views

CVE-2025-41654 PEPPERL+FUCHS: Profinet Gateway LB8122A.1.EL – Device is affected by information disclosure via the SNMP protocol

An unauthenticated remote attacker can access information about running processes via the SNMP protocol. The amount of returned data can trigger a reboot by the watchdog...

8.2CVSS6.9AI score0.00388EPSS
Exploits0References1
CVE
CVE
added 2025/05/26 8:21 a.m.50 views

CVE-2025-1985

CVE-2025-1985 matches the Pepperl+Fuchs Profinet Gateway LB8122A.1.EL / FB8122A.1.EL family. The issue is an XSS due to improper neutralization of input during web page generation, allowing an unauthenticated remote attacker to inject HTML into the Web-UI of the affected device. Documented in mul...

6.1CVSS6.3AI score0.00122EPSS
Exploits0References1
Cvelist
Cvelist
added 2025/05/26 8:21 a.m.12 views

CVE-2025-1985 PEPPERL+FUCHS: Profinet Gateway LB8122A.1.EL – Device is affected by XSS vulnerability

Due to improper neutralization of input during web page generation XSS an unauthenticated remote attacker can inject HTML code into the Web-UI in the affected device...

6.1CVSS0.00122EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2025/05/26 8:21 a.m.2 views

CVE-2025-1985 PEPPERL+FUCHS: Profinet Gateway LB8122A.1.EL – Device is affected by XSS vulnerability

Due to improper neutralization of input during web page generation XSS an unauthenticated remote attacker can inject HTML code into the Web-UI in the affected device...

6.1CVSS6.7AI score0.00122EPSS
Exploits0References1
Positive Technologies
Positive Technologies
added 2025/05/26 12:0 a.m.3 views

PT-2025-22886 · Pepperl+Fuchs · Profinet Gateway Fb8122A.1.El +1

Name of the Vulnerable Software and Affected Versions: The product name cannot be determined. Description: Due to improper neutralization of input during web page generation, an unauthenticated remote attacker can inject HTML code into the Web-UI in the affected device. Recommendations: At the...

6.1CVSS6.5AI score0.00122EPSS
Exploits0References5
Positive Technologies
Positive Technologies
added 2025/05/26 12:0 a.m.2 views

PT-2025-22904 · Pepperl+Fuchs · Profinet Gateway Fb8122A.1.El

Name of the Vulnerable Software and Affected Versions: Pepperl+Fuchs - Profinet Gateway FB8122A.1.EL version not specified Description: An unauthenticated remote attacker can access information about running processes via the SNMP protocol. The amount of returned data can trigger a reboot by the...

8.2CVSS6.5AI score0.00388EPSS
Exploits0References12
Positive Technologies
Positive Technologies
added 2025/05/26 12:0 a.m.2 views

PT-2025-22905 · Pepperl+Fuchs · Profinet Gateway Fb8122A.1.El

Name of the Vulnerable Software and Affected Versions: Pepperl+Fuchs - Profinet Gateway FB8122A.1.EL affected versions not specified Description: An unauthenticated remote attacker can access a URL which causes the device to reboot. Recommendations: At the moment, there is no information about a...

7.5CVSS6.4AI score0.00407EPSS
Exploits0References12
CNNVD
CNNVD
added 2025/05/26 12:0 a.m.1 views

Pepperl+Fuchs Profinet Gateway 跨站脚本漏洞

Pepperl+Fuchs Profinet Gateway is a series of gateways from Pepperl+Fuchs. A cross-site scripting vulnerability exists in Pepperl+Fuchs Profinet Gateway FB8122A.1.EL and Profinet Gateway LB8122A.1.EL, which stems from improper input neutralization during web page generation and could lead to a...

6.1CVSS6AI score0.00122EPSS
Exploits0References1
CNNVD
CNNVD
added 2025/05/26 12:0 a.m.1 views

Pepperl+Fuchs Profinet Gateway 访问控制错误漏洞

Pepperl+Fuchs Profinet Gateway is a series of gateways from Pepperl+Fuchs. An access control error vulnerability exists in Pepperl+Fuchs Profinet Gateway FB8122A.1.EL and Profinet Gateway LB8122A.1.EL, which stems from unauthorized access to the SNMP protocol and could lead to information...

8.2CVSS6.1AI score0.00388EPSS
Exploits0References2
CNNVD
CNNVD
added 2025/05/26 12:0 a.m.1 views

Pepperl+Fuchs Profinet Gateway 访问控制错误漏洞

Pepperl+Fuchs Profinet Gateway is a series of gateways from Pepperl+Fuchs. An access control error vulnerability exists in Pepperl+Fuchs Profinet Gateway FB8122A.1.EL and Profinet Gateway LB8122A.1.EL, which stems from the fact that an unauthenticated, remote attacker can access specific URLs to...

7.5CVSS6.7AI score0.00407EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2025/05/23 12:46 a.m.4 views

CVE-2022-25622

The PROFINET PNIO stack, when integrated with the Interniche IP stack, improperly handles internal resources for TCP segments where the minimum TCP-Header length is less than defined. This could allow an attacker to create a denial of service condition for TCP services on affected devices by...

7.5CVSS6.8AI score0.00145EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2025/05/23 12:21 a.m.5 views

CVE-2022-46351

A vulnerability has been identified in SCALANCE X204RNA HSR All versions V3.2.7, SCALANCE X204RNA PRP All versions V3.2.7, SCALANCE X204RNA EEC HSR All versions V3.2.7, SCALANCE X204RNA EEC PRP All versions V3.2.7, SCALANCE X204RNA EEC PRP/HSR All versions V3.2.7. Specially crafted PROFINET DCP...

5.5CVSS6.5AI score0.0014EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2025/05/23 12:21 a.m.9 views

CVE-2022-46352

A vulnerability has been identified in SCALANCE X204RNA HSR All versions V3.2.7, SCALANCE X204RNA PRP All versions V3.2.7, SCALANCE X204RNA EEC HSR All versions V3.2.7, SCALANCE X204RNA EEC PRP All versions V3.2.7, SCALANCE X204RNA EEC PRP/HSR All versions V3.2.7. Specially crafted PROFINET DCP...

7.5CVSS6.6AI score0.0054EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2025/05/22 10:1 p.m.8 views

CVE-2022-30937

A vulnerability has been identified in EN100 Ethernet module DNP3 IP variant All versions, EN100 Ethernet module IEC 104 variant All versions, EN100 Ethernet module IEC 61850 variant All versions V4.37, EN100 Ethernet module Modbus TCP variant All versions, EN100 Ethernet module PROFINET IO varia...

7.8CVSS6.9AI score0.00532EPSS
Exploits0References1
Rows per page
Query Builder