Siemens SCALANCE LPE9403 Out-of-Bounds Read Vulnerability

Siemens SCALANCE LPE9403 is a local processing engine for industrial field data processing from Siemens. It is used to capture, collect and pre-process industrial field data. The Siemens SCALANCE LPE9403 suffers from an out-of-bounds read vulnerability due to the inability of an affected device t...

Siemens SCALANCE LPE9403 Null Pointer Dereference Vulnerability

Siemens SCALANCE LPE9403 is a local processing engine for industrial field data processing from Siemens. It is used to capture, collect and pre-process industrial field data. The Siemens SCALANCE LPE9403 suffers from a null pointer dereference vulnerability due to an affected device failing to...

Siemens SCALANCE LPE9403 Denial of Service Vulnerability

Siemens SCALANCE LPE9403 is a local processing engine for industrial field data processing from Siemens. It is used to capture, collect and pre-process industrial field data. A denial of service vulnerability exists in the Siemens SCALANCE LPE9403, which stems from not properly validating Profine...

CVE-2025-41654 PEPPERL+FUCHS: Profinet Gateway LB8122A.1.EL – Device is affected by information disclosure via the SNMP protocol

An unauthenticated remote attacker can access information about running processes via the SNMP protocol. The amount of returned data can trigger a reboot by the watchdog...

CVE-2025-41654 PEPPERL+FUCHS: Profinet Gateway LB8122A.1.EL – Device is affected by information disclosure via the SNMP protocol

An unauthenticated remote attacker can access information about running processes via the SNMP protocol. The amount of returned data can trigger a reboot by the watchdog...

CVE-2025-41654

CVE-2025-41654 affects Pepperl+Fuchs Profinet Gateway LB8122A.1.EL and FB8122A.1.EL. An unauthenticated remote attacker can access information about running processes via SNMP, with the amount of returned data potentially triggering a watchdog reboot. Public documents confirm information disclosu...

CVE-2025-1985 PEPPERL+FUCHS: Profinet Gateway LB8122A.1.EL – Device is affected by XSS vulnerability

Due to improper neutralization of input during web page generation XSS an unauthenticated remote attacker can inject HTML code into the Web-UI in the affected device...

CVE-2025-1985 PEPPERL+FUCHS: Profinet Gateway LB8122A.1.EL – Device is affected by XSS vulnerability

Due to improper neutralization of input during web page generation XSS an unauthenticated remote attacker can inject HTML code into the Web-UI in the affected device...

CVE-2025-1985

CVE-2025-1985 matches the Pepperl+Fuchs Profinet Gateway LB8122A.1.EL / FB8122A.1.EL family. The issue is an XSS due to improper neutralization of input during web page generation, allowing an unauthenticated remote attacker to inject HTML into the Web-UI of the affected device. Documented in mul...

PT-2025-22905 · Pepperl+Fuchs · Profinet Gateway Fb8122A.1.El

Name of the Vulnerable Software and Affected Versions: Pepperl+Fuchs - Profinet Gateway FB8122A.1.EL affected versions not specified Description: An unauthenticated remote attacker can access a URL which causes the device to reboot. Recommendations: At the moment, there is no information about a...

Pepperl+Fuchs Profinet Gateway 访问控制错误漏洞

Pepperl+Fuchs Profinet Gateway is a series of gateways from Pepperl+Fuchs. An access control error vulnerability exists in Pepperl+Fuchs Profinet Gateway FB8122A.1.EL and Profinet Gateway LB8122A.1.EL, which stems from unauthorized access to the SNMP protocol and could lead to information...

PT-2025-22886 · Pepperl+Fuchs · Profinet Gateway Fb8122A.1.El +1

Name of the Vulnerable Software and Affected Versions: The product name cannot be determined. Description: Due to improper neutralization of input during web page generation, an unauthenticated remote attacker can inject HTML code into the Web-UI in the affected device. Recommendations: At the...

Pepperl+Fuchs Profinet Gateway 访问控制错误漏洞

Pepperl+Fuchs Profinet Gateway is a series of gateways from Pepperl+Fuchs. An access control error vulnerability exists in Pepperl+Fuchs Profinet Gateway FB8122A.1.EL and Profinet Gateway LB8122A.1.EL, which stems from the fact that an unauthenticated, remote attacker can access specific URLs to...

PT-2025-22904 · Pepperl+Fuchs · Profinet Gateway Fb8122A.1.El

Name of the Vulnerable Software and Affected Versions: Pepperl+Fuchs - Profinet Gateway FB8122A.1.EL version not specified Description: An unauthenticated remote attacker can access information about running processes via the SNMP protocol. The amount of returned data can trigger a reboot by the...

Pepperl+Fuchs Profinet Gateway 跨站脚本漏洞

Pepperl+Fuchs Profinet Gateway is a series of gateways from Pepperl+Fuchs. A cross-site scripting vulnerability exists in Pepperl+Fuchs Profinet Gateway FB8122A.1.EL and Profinet Gateway LB8122A.1.EL, which stems from improper input neutralization during web page generation and could lead to a...

CVE-2022-25622

The PROFINET PNIO stack, when integrated with the Interniche IP stack, improperly handles internal resources for TCP segments where the minimum TCP-Header length is less than defined. This could allow an attacker to create a denial of service condition for TCP services on affected devices by...

CVE-2022-46352

A vulnerability has been identified in SCALANCE X204RNA HSR All versions V3.2.7, SCALANCE X204RNA PRP All versions V3.2.7, SCALANCE X204RNA EEC HSR All versions V3.2.7, SCALANCE X204RNA EEC PRP All versions V3.2.7, SCALANCE X204RNA EEC PRP/HSR All versions V3.2.7. Specially crafted PROFINET DCP...

CVE-2022-46351

A vulnerability has been identified in SCALANCE X204RNA HSR All versions V3.2.7, SCALANCE X204RNA PRP All versions V3.2.7, SCALANCE X204RNA EEC HSR All versions V3.2.7, SCALANCE X204RNA EEC PRP All versions V3.2.7, SCALANCE X204RNA EEC PRP/HSR All versions V3.2.7. Specially crafted PROFINET DCP...

CVE-2022-30937

A vulnerability has been identified in EN100 Ethernet module DNP3 IP variant All versions, EN100 Ethernet module IEC 104 variant All versions, EN100 Ethernet module IEC 61850 variant All versions V4.37, EN100 Ethernet module Modbus TCP variant All versions, EN100 Ethernet module PROFINET IO varia...

CVE-2020-5653

Buffer overflow vulnerability in TCP/IP function included in the firmware of MELSEC iQ-R series RJ71EIP91 EtherNet/IP Network Interface Module First 2 digits of serial number are '02' or before, RJ71PN92 PROFINET IO Controller Module First 2 digits of serial number are '01' or before, RD81DL96 Hi...