Lucene search
+L

138 matches found

CNNVD
CNNVD
added 2025/05/26 12:00 a.m.9 views

Pepperl+Fuchs Profinet Gateway 访问控制错误漏洞

Pepperl+Fuchs Profinet Gateway is a series of gateways from Pepperl+Fuchs. An access control error vulnerability exists in Pepperl+Fuchs Profinet Gateway FB8122A.1.EL and Profinet Gateway LB8122A.1.EL, which stems from the fact that an unauthenticated, remote attacker can access specific URLs to...

7.5CVSS6.7AI score0.0047EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2025/05/26 12:00 a.m.11 views

Pepperl+Fuchs Profinet Gateway 跨站脚本漏洞

Pepperl+Fuchs Profinet Gateway is a series of gateways from Pepperl+Fuchs. A cross-site scripting vulnerability exists in Pepperl+Fuchs Profinet Gateway FB8122A.1.EL and Profinet Gateway LB8122A.1.EL, which stems from improper input neutralization during web page generation and could lead to a...

6.1CVSS6AI score0.00296EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2024/08/13 12:33 p.m.36 views

CVE-2024-38502 Pepperl+Fuchs: Device Master ICDM-RX/* XSS vulnerability allows stored XSS

An unauthenticated remote attacker may use stored XSS vulnerability to obtain information from a user or reboot the affected device once...

7.1CVSS5.9AI score0.00337EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2024/08/13 12:33 p.m.38 views

CVE-2024-38502 Pepperl+Fuchs: Device Master ICDM-RX/* XSS vulnerability allows stored XSS

An unauthenticated remote attacker may use stored XSS vulnerability to obtain information from a user or reboot the affected device once...

7.1CVSS0.00337EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2024/08/13 12:33 p.m.31 views

CVE-2024-38501 Pepperl+Fuchs: Device Master ICDM-RX/* XSS vulnerability allows HTML injection

An unauthenticated remote attacker may use a HTML injection vulnerability with limited length to inject malicious HTML code and gain low-privileged access on the affected device...

6.1CVSS7.5AI score0.00329EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2024/08/13 12:33 p.m.41 views

CVE-2024-38501 Pepperl+Fuchs: Device Master ICDM-RX/* XSS vulnerability allows HTML injection

An unauthenticated remote attacker may use a HTML injection vulnerability with limited length to inject malicious HTML code and gain low-privileged access on the affected device...

6.1CVSS0.00329EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2024/08/13 12:32 p.m.16 views

CVE-2024-5849 Pepperl+Fuchs: Device Master ICDM-RX/* XSS vulnerability allows reflected XSS

An unauthenticated remote attacker may use a reflected XSS vulnerability to obtain information from a user or reboot the affected device once...

7.1CVSS6.1AI score0.00377EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2024/08/13 12:32 p.m.49 views

CVE-2024-5849 Pepperl+Fuchs: Device Master ICDM-RX/* XSS vulnerability allows reflected XSS

An unauthenticated remote attacker may use a reflected XSS vulnerability to obtain information from a user or reboot the affected device once...

7.1CVSS0.00377EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2024/08/13 12:00 a.m.15 views

Pepperl+Fuchs ICDM-RX 跨站脚本漏洞

The Pepperl+Fuchs ICDM-RX is a series of gateway devices from Pepperl+Fuchs Germany. A cross-site scripting vulnerability exists in the Pepperl+Fuchs ICDM-RX. An attacker could exploit this vulnerability to obtain information from a user or reboot the affected device once...

7.1CVSS5.8AI score0.00377EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2024/08/13 12:00 a.m.14 views

Pepperl+Fuchs ICDM-RX 跨站脚本漏洞

The Pepperl+Fuchs ICDM-RX is a series of gateway devices from Pepperl+Fuchs Germany. A cross-site scripting vulnerability exists in the Pepperl+Fuchs ICDM-RX. An attacker could exploit this vulnerability to obtain information from a user or reboot the affected device once...

7.1CVSS5.8AI score0.00337EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2024/08/13 12:00 a.m.12 views

Pepperl+Fuchs ICDM-RX 跨站脚本漏洞

The Pepperl+Fuchs ICDM-RX is a series of gateway devices from Pepperl+Fuchs Germany. A cross-site scripting vulnerability exists in the Pepperl+Fuchs ICDM-RX. An attacker can exploit this vulnerability to inject malicious HTML code and gain low-privilege access on the affected device...

6.1CVSS6.2AI score0.00329EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
added 2024/07/10 7:37 a.m.17 views

CVE-2024-6422 Pepperl+Fuchs: OIT Products can be manipulated via unintended Telnet access

An unauthenticated remote attacker can manipulate the device via Telnet, stop processes, read, delete and change data...

9.8CVSS7.4AI score0.00586EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2024/07/10 7:37 a.m.50 views

CVE-2024-6422 Pepperl+Fuchs: OIT Products can be manipulated via unintended Telnet access

An unauthenticated remote attacker can manipulate the device via Telnet, stop processes, read, delete and change data...

9.8CVSS0.00586EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2024/07/10 7:36 a.m.22 views

CVE-2024-6421 Pepperl+Fuchs: Incorrectly configured FTP-Server in OIT Products

An unauthenticated remote attacker can read out sensitive device information through a incorrectly configured FTP service...

7.5CVSS6.7AI score0.00511EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2024/07/10 7:36 a.m.46 views

CVE-2024-6421 Pepperl+Fuchs: Incorrectly configured FTP-Server in OIT Products

An unauthenticated remote attacker can read out sensitive device information through a incorrectly configured FTP service...

7.5CVSS0.00511EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2024/07/10 12:00 a.m.13 views

Pepperl+Fuchs Multiple Products Information Disclosure Vulnerability

Pepperl+Fuchs OIT Series is a series of high-temperature identification systems from Pepperl+Fuchs, Germany. An information disclosure vulnerability exists in various Pepperl+Fuchs products, which originates from an unauthenticated, remote attacker being able to read sensitive device information...

7.5CVSS6.1AI score0.00511EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
added 2024/07/10 12:00 a.m.12 views

PT-2024-37615 · Pepperl+Fuchs · Oit1500-F113-B12-Cb +7

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided descriptions. Description: An unauthenticated remote attacker can manipulate the device via Telnet, stop processes, read, delete and change data. Recommendations: At the moment,...

9.8CVSS7.2AI score0.00586EPSS
SaveExploits0References5
Positive Technologies
Positive Technologies
added 2024/07/10 12:00 a.m.20 views

PT-2024-37614 · Pepperl+Fuchs · Oit1500-F113-B12-Cb +7

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided descriptions. Description: An unauthenticated remote attacker can read out sensitive device information through an incorrectly configured FTP service. There is no information...

7.5CVSS7.1AI score0.00511EPSS
SaveExploits0References6
CNNVD
CNNVD
added 2024/07/10 12:00 a.m.10 views

Pepperl+Fuchs Multiple Products Access Control Error Vulnerability

Pepperl+Fuchs OIT Series is a series of high temperature identification systems from Pepperl+Fuchs, Germany. An access control error vulnerability exists in various Pepperl+Fuchs products, which can be exploited by an unauthenticated, remote attacker to manipulate the device, stop processes, read...

9.8CVSS6.7AI score0.00586EPSS
SaveExploits0References2
ICS
ICS
added 2022/04/07 12:00 a.m.161 views

Pepperl+Fuchs WirelessHART-Gateway

1. EXECUTIVE SUMMARY CVSS v3 9.8 ATTENTION: Exploitable remotely/low attack complexity Vendor: Pepperl+Fuchs Equipment: WirelessHART-Gateway Vulnerabilities: Use of Hard-coded Credentials, Uncontrolled Resource Consumption, Reliance on Reverse DNS Resolution for a Security-critical Action, Path...

9.8CVSS8.6AI score0.99019EPSS
SaveExploits21References5
Rows per page
Query Builder