Pepperl+fuchs vulnerabilities

Products

• Ice2-8iol1-g65l-v1d 20
• Ice2-8iol-g65l-v1d 20
• Ice2-8iol-k45p-rj45 20
• Ice2-8iol-k45s-rj45 20
• Ice3-8iol1-g65l-v1d 20
• Ice3-8iol-g65l-v1d 20
• Ice3-8iol-g65l-v1d-y 20
• Ice3-8iol-k45p-rj45 20
• Ice3-8iol-k45s-rj45 20
• P+f Comtrol Rocketlinx 5
• Icdm-rx/en1-2db9/rj45-din 3
• Icdm-rx/en1-2st/rj45-din 3
• Icdm-rx/en1-4db9/2rj45-din 3
• Icdm-rx/en1-db9/rj45-din 3
• Icdm-rx/en1-db9/rj45-pm 3
• Icdm-rx/en1-st/rj45-din 3
• Icdm-rx/en-2db9/rj45-din 3
• Icdm-rx/en-2st/rj45-din 3
• Icdm-rx/en-4db9/2rj45-din 3
• Icdm-rx/en-db9/rj45-din 3
• Icdm-rx/en-db9/rj45-pm 3
• Icdm-rx/en-st/rj45-din 3
• Icdm-rx/mod-16rj45/2rj45-pm 3
• Icdm-rx/mod-2db9/rj45-din 3
• Icdm-rx/mod-2st/rj45-din 3
• Icdm-rx/mod-4db9/2rj45-din 3
• Icdm-rx/mod-db9/rj45-din 3
• Icdm-rx/mod-db9/rj45-pm 3
• Icdm-rx/mod-st/rj45-din 3
• Icdm-rx/pn1-2db9/rj45-din 3
• Icdm-rx/pn1-2st/rj45-din 3
• Icdm-rx/pn1-4db9/2rj45-din 3
• Icdm-rx/pn1-db9/rj45-din 3
• Icdm-rx/pn1-db9/rj45-pm 3
• Icdm-rx/pn1-st/rj45-din 3
• Icdm-rx/pn-2db9/rj45-din 3
• Icdm-rx/pn-2st/rj45-din 3
• Icdm-rx/pn-4db9/2rj45-din 3
• Icdm-rx/pn-db9/rj45-din 3
• Icdm-rx/pn-db9/rj45-pm 3

Show 20 moreShow less

• Icdm-rx/pn-st/rj45-din 3
• Icdm-rx/tcp-16db9/rj45-rm 3
• Icdm-rx/tcp-16rj45/2rj45-pm 3
• Icdm-rx/tcp-16rj45/rj45-rm 3
• Icdm-rx/tcp-2db9/rj45-din 3
• Icdm-rx/tcp-2st/rj45-din 3
• Icdm-rx/tcp-32rj45/rj45-rm 3
• Icdm-rx/tcp-4db9/2rj45-din 3
• Icdm-rx/tcp-4db9/2rj45-pm 3
• Icdm-rx/tcp-8db9/2rj45-pm 3
• Icdm-rx/tcp-db9/rj45-din 3
• Icdm-rx/tcp-db9/rj45-pm 3
• Icdm-rx/tcp-db9/rj45-pm2 3
• Icdm-rx/tcp-st/rj45-din 3
• Profinet Gateway Fb8122a.1.el 3
• Profinet Gateway Lb8122a.1.el 3
• Oit1500-f113-b12-cb 2
• Oit200-f113-b12-cb 2
• Oit500-f113-b12-cb 2
• Oit700-f113-b12-cb 2

Newest

• carlo gavazzi automation yl212cei8m1io, yl212cpn8m1io, yn115cei8rpio +12 more +14 more Remote code execution via uploading a malicious IODD file CVE-2026-27565 9.8 CriticalSeptember 16, 2026
• carlo gavazzi automation yl212cei8m1io, yl212cpn8m1io, yn115cei8rpio +12 more +14 more Command Injection via PUT in /api/datastorage/data CVE-2026-27564 7.2 HighSeptember 16, 2026
• carlo gavazzi automation yl212cei8m1io, yl212cpn8m1io, yn115cei8rpio +12 more +14 more Command Injection via GET in /api/datastorage/data CVE-2026-27563 7.2 HighSeptember 16, 2026
• carlo gavazzi automation yl212cei8m1io, yl212cpn8m1io, yn115cei8rpio +12 more +14 more Command Injection via PUT in /api/iodd/config CVE-2026-27562 7.2 HighSeptember 16, 2026
• carlo gavazzi automation yl212cei8m1io, yl212cpn8m1io, yn115cei8rpio +12 more +14 more Command Injection via GET in /api/iodd/config CVE-2026-27561 7.2 HighSeptember 16, 2026
• carlo gavazzi automation yl212cei8m1io, yl212cpn8m1io, yn115cei8rpio +12 more +14 more Command Injection via DELETE in /api/status/data CVE-2026-27560 7.2 HighSeptember 16, 2026
• carlo gavazzi automation yl212cei8m1io, yl212cpn8m1io, yn115cei8rpio +12 more +14 more Command Injection via GET in /api/status/data CVE-2026-27559 8.8 HighSeptember 16, 2026
• carlo gavazzi automation yl212cei8m1io, yl212cpn8m1io, yn115cei8rpio +12 more +14 more Command Injection in /index.php/attached_devices_tab/ajax_remove_uploaded_iodd_files CVE-2026-27558 8.8 HighSeptember 16, 2026
• carlo gavazzi automation yl212cei8m1io, yl212cpn8m1io, yn115cei8rpio +12 more +14 more Path Traversal in /index.php/view_uploaded_iodd_file CVE-2026-27557 7.5 HighSeptember 16, 2026
• carlo gavazzi automation yl212cei8m1io, yl212cpn8m1io, yn115cei8rpio +12 more +14 more Local File Inclusion in /index.php/ajax/save_iodd_parameters CVE-2026-27556 8.8 HighSeptember 16, 2026
• carlo gavazzi automation yl212cei8m1io, yl212cpn8m1io, yn115cei8rpio +12 more +14 more Local File Inclusion in /index.php/ajax/get_iodd_port_info CVE-2026-27555 8.8 HighSeptember 16, 2026
• carlo gavazzi automation yl212cei8m1io, yl212cpn8m1io, yn115cei8rpio +12 more +14 more Command Injection in /index.php/ajax/save_iodd_parameters CVE-2026-27554 8.8 HighSeptember 16, 2026
• carlo gavazzi automation yl212cei8m1io, yl212cpn8m1io, yn115cei8rpio +12 more +14 more Information Disclosure via Schema Path Manipulation CVE-2026-27553 6.5 MediumSeptember 16, 2026
• carlo gavazzi automation yl212cei8m1io, yl212cpn8m1io, yn115cei8rpio +12 more +14 more Unauthorized IODD File Upload due to Improper Authorization CVE-2026-27552 8.1 HighSeptember 16, 2026
• carlo gavazzi automation yl212cei8m1io, yl212cpn8m1io, yn115cei8rpio +12 more +14 more Command Injection in /index.php/ajax/parameterManage CVE-2026-27551 8.8 HighSeptember 16, 2026
• carlo gavazzi automation yl212cei8m1io, yl212cpn8m1io, yn115cei8rpio +12 more +14 more Command Injection in Field_Shadow_Password Class CVE-2026-27550 8.8 HighSeptember 16, 2026
• carlo gavazzi automation yl212cei8m1io, yl212cpn8m1io, yn115cei8rpio +12 more +14 more Command Injection in /index.php/attached_devices_tab/do_upload CVE-2026-27549 8.8 HighSeptember 16, 2026
• carlo gavazzi automation yl212cei8m1io, yl212cpn8m1io, yn115cei8rpio +12 more +14 more Command Injection in /index.php/ajax/get_iodd_port_info CVE-2026-27548 8.8 HighSeptember 16, 2026
• carlo gavazzi automation yl212cei8m1io, yl212cpn8m1io, yn115cei8rpio +12 more +14 more Command Injection in /index.php/ajax/get_iodd_menu_info CVE-2026-27547 8.8 HighSeptember 16, 2026
• carlo gavazzi automation yl212cei8m1io, yl212cpn8m1io, yn115cei8rpio +12 more +14 more Authentication Bypass in _account_log CVE-2026-27546 9.8 CriticalSeptember 16, 2026
• pepperl+fuchs profinet gateway fb8122a.1.el, profinet gateway lb8122a.1.el +1 more PEPPERL+FUCHS: Attacker can cause a DoS via URL CVE-2025-41655 7.5 HighMay 26, 2025
• pepperl+fuchs profinet gateway lb8122a.1.el, profinet gateway fb8122a.1.el +1 more PEPPERL+FUCHS: Profinet Gateway LB8122A.1.EL – Device is affected by information disclosure via the SNMP protocol CVE-2025-41654 8.2 HighMay 26, 2025
• pepperl+fuchs profinet gateway lb8122a.1.el, profinet gateway fb8122a.1.el +1 more PEPPERL+FUCHS: Profinet Gateway LB8122A.1.EL – Device is affected by XSS vulnerability CVE-2025-1985 6.1 MediumMay 26, 2025
• pepperl+fuchs icdm-rx/en-2db9/rj45-din, icdm-rx/en-2st/rj45-din, icdm-rx/en-4db9/2rj45-din +49 more +51 more Pepperl+Fuchs: Device Master ICDM-RX/* XSS vulnerability allows stored XSS CVE-2024-38502 7.1 HighAugust 13, 2024
• pepperl+fuchs icdm-rx/en-2db9/rj45-din, icdm-rx/en-2st/rj45-din, icdm-rx/en-4db9/2rj45-din +49 more +51 more Pepperl+Fuchs: Device Master ICDM-RX/* XSS vulnerability allows HTML injection CVE-2024-38501 6.1 MediumAugust 13, 2024
• pepperl+fuchs icdm-rx/en-2db9/rj45-din, icdm-rx/en-2st/rj45-din, icdm-rx/en-4db9/2rj45-din +49 more +51 more Pepperl+Fuchs: Device Master ICDM-RX/* XSS vulnerability allows reflected XSS CVE-2024-5849 7.1 HighAugust 13, 2024
• pepperl+fuchs oit1500-f113-b12-cb, oit200-f113-b12-cb, oit500-f113-b12-cb +5 more +7 more Pepperl+Fuchs: OIT Products can be manipulated via unintended Telnet access CVE-2024-6422 9.8 CriticalJuly 10, 2024
• pepperl+fuchs oit1500-f113-b12-cb, oit200-f113-b12-cb, oit500-f113-b12-cb +5 more +7 more Pepperl+Fuchs: Incorrectly configured FTP-Server in OIT Products CVE-2024-6421 7.5 HighJuly 10, 2024
• hilscher rcx rtos, pepperl+fuchs ethernet io modules ice1-16, ethernet io modules ice1-8 +8 more +10 more Hilscher rcX RTOS: Wrong handling of the UDP checksum CVE-2021-20988 8.6 HighMay 13, 2021
• pepperl+fuchs p+f comtrol rocketlinx, korenix jetnet, jetwave 2212g firmware +29 more +31 more Pepperl+Fuchs improper authorization affects multiple Comtrol RocketLinx products CVE-2020-12504 9.8 CriticalOctober 15, 2020
• pepperl+fuchs p+f comtrol rocketlinx, korenix jetnet, jetnet 4510 firmware +28 more +30 more Pepperl+Fuchs improper authorization affects multiple Comtrol RocketLinx products CVE-2020-12503 EPSS 22.8% 7.2 HighOctober 15, 2020
• pepperl+fuchs p+f comtrol rocketlinx, korenix jetnet, jetnet 4510 firmware +23 more +25 more Pepperl+Fuchs improper authorization affects multiple Comtrol RocketLinx products CVE-2020-12502 8.8 HighOctober 15, 2020
• pepperl+fuchs p+f comtrol rocketlinx, korenix jetnet, jetnet4510 firmware +26 more +28 more Pepperl+Fuchs improper authorization affects multiple Comtrol RocketLinx products CVE-2020-12501 9.8 CriticalOctober 15, 2020
• pepperl+fuchs p+f comtrol rocketlinx, korenix jetnet, pepperl-fuchs es7506 firmware +13 more +15 more Pepperl+Fuchs improper authorization affects multiple Comtrol RocketLinx products CVE-2020-12500 9.8 CriticalOctober 15, 2020