Pepperl-fuchs vulnerabilities

Products

• Wha-gw-f2d2-0-as-z2-eth Firmware 8
• Wha-gw-f2d2-0-as-z2-eth.eip Firmware 6
• Es7506 Firmware 5
• Es7510 Firmware 5
• Es7510-xt Firmware 5
• Es7528 Firmware 5
• Es8508f Firmware 5
• Es8508 Firmware 5
• Es8509-xt Firmware 5
• Es8510 Firmware 5
• Es8510-xte Firmware 5
• Es8510-xt Firmware 5
• Es9528 Firmware 5
• Es9528-xt Firmware 5
• Es9528-xtv2 Firmware 5
• Io-link Master 4-eip Firmware 4
• Io-link Master 4-pnio Firmware 4
• Io-link Master 8-eip Firmware 4
• Io-link Master 8-eip-l Firmware 4
• Io-link Master 8-pnio Firmware 4
• Io-link Master 8-pnio-l Firmware 4
• Io-link Master Dr-8-eip Firmware 4
• Io-link Master Dr-8-eip-p Firmware 4
• Io-link Master Dr-8-eip-t Firmware 4
• Io-link Master Dr-8-pnio Firmware 4
• Io-link Master Dr-8-pnio-p Firmware 4
• Io-link Master Dr-8-pnio-t Firmware 4
• Eip\/modbus Firmware 3
• Ethernet\/ip Firmware 3
• Icdm-rx\/tcp Socketserver Firmware 3
• Icrl-m-16rj45\/4cp-g-din Firmware 3
• Icrl-m-8rj45\/4sfp-g-din Firmware 3
• Modbus Router Firmware 3
• Modbus Server Firmware 3
• Modbus Tcp Firmware 3
• Profinet Firmware 3
• Profinet\/modbus Firmware 3
• Oit1500-f113-b12-cb Firmware 2
• Oit200-f113-b12-cb Firmware 2
• Oit500-f113-b12-cb Firmware 2
• Oit700-f113-b12-cb Firmware 2
• Wcs Firmware 2
• Wha-gw-f2d2-0-as- Z2-eth.eip Firmware 2

Newest

• pepperl+fuchs icdm-rx/en-2db9/rj45-din, icdm-rx/en-2st/rj45-din, icdm-rx/en-4db9/2rj45-din +49 more +51 more Pepperl+Fuchs: Device Master ICDM-RX/* XSS vulnerability allows stored XSS CVE-2024-38502 7.1 HighAugust 13, 2024
• pepperl+fuchs icdm-rx/en-2db9/rj45-din, icdm-rx/en-2st/rj45-din, icdm-rx/en-4db9/2rj45-din +49 more +51 more Pepperl+Fuchs: Device Master ICDM-RX/* XSS vulnerability allows HTML injection CVE-2024-38501 6.1 MediumAugust 13, 2024
• pepperl+fuchs icdm-rx/en-2db9/rj45-din, icdm-rx/en-2st/rj45-din, icdm-rx/en-4db9/2rj45-din +49 more +51 more Pepperl+Fuchs: Device Master ICDM-RX/* XSS vulnerability allows reflected XSS CVE-2024-5849 7.1 HighAugust 13, 2024
• pepperl+fuchs oit1500-f113-b12-cb, oit200-f113-b12-cb, oit500-f113-b12-cb +5 more +7 more Pepperl+Fuchs: OIT Products can be manipulated via unintended Telnet access CVE-2024-6422 9.8 CriticalJuly 10, 2024
• pepperl+fuchs oit1500-f113-b12-cb, oit200-f113-b12-cb, oit500-f113-b12-cb +5 more +7 more Pepperl+Fuchs: Incorrectly configured FTP-Server in OIT Products CVE-2024-6421 7.5 HighJuly 10, 2024
• pepperl-fuchs wha-gw-f2d2-0-as-z2-eth.eip firmware, wha-gw-f2d2-0-as-z2-eth firmware, phoenix contact wha-gw-f2d2-0-as- z2-eth +1 more +3 more In WirelessHART-Gateway versions 3.0.7 to 3.0.9 hard-coded credentials have been found CVE-2021-34565 9.8 CriticalAugust 31, 2021
• pepperl-fuchs wha-gw-f2d2-0-as- z2-eth.eip firmware, wha-gw-f2d2-0-as-z2-eth firmware, phoenix contact wha-gw-f2d2-0-as- z2-eth +1 more +3 more In WirelessHART-Gateway versions 3.0.9 a vulnerability allows to read and write sensitive data in a cookie CVE-2021-34564 5.5 MediumAugust 31, 2021
• pepperl-fuchs wha-gw-f2d2-0-as-z2-eth.eip firmware, wha-gw-f2d2-0-as-z2-eth firmware, phoenix contact wha-gw-f2d2-0-as- z2-eth +1 more +3 more In WirelessHART-Gateway versions 3.0.8 and 3.0.9 the HttpOnly flag is missing in a cookie which allows client-side javascript to modify it CVE-2021-34563 3.3 LowAugust 31, 2021
• pepperl-fuchs wha-gw-f2d2-0-as-z2-eth.eip firmware, wha-gw-f2d2-0-as-z2-eth firmware, phoenix contact wha-gw-f2d2-0-as- z2-eth +1 more +3 more A vulnerability in WirelessHART-Gateway 3.0.8 it is possible to inject arbitrary JavaScript into the application's response CVE-2021-34562 5.4 MediumAugust 31, 2021
• pepperl-fuchs wha-gw-f2d2-0-as-z2-eth.eip firmware, wha-gw-f2d2-0-as-z2-eth firmware, phoenix contact wha-gw-f2d2-0-as- z2-eth +1 more +3 more A vulnerability in WirelessHART-Gateway <= 3.0.8 allows to bypass any IP or firewall based access restrictions through DNS rebinding CVE-2021-34561 7.5 HighAugust 31, 2021
• pepperl-fuchs wha-gw-f2d2-0-as-z2-eth.eip firmware, wha-gw-f2d2-0-as-z2-eth firmware, phoenix contact wha-gw-f2d2-0-as- z2-eth +1 more +3 more A vulnerability in WirelessHART-Gateway <= 3.0.9 could lead to information exposure of sensitive information CVE-2021-34560 5.5 MediumAugust 31, 2021
• pepperl-fuchs wha-gw-f2d2-0-as-z2-eth.eip firmware, wha-gw-f2d2-0-as-z2-eth firmware, phoenix contact wha-gw-f2d2-0-as- z2-eth +1 more +3 more A vulnerability in WirelessHART-Gateway <= 3.0.8 may allow remote attackers to rewrite links and URLs in cached pages to arbitrary strings CVE-2021-34559 5.4 MediumAugust 31, 2021
• pepperl-fuchs wha-gw-f2d2-0-as- z2-eth.eip firmware, wha-gw-f2d2-0-as-z2-eth firmware, phoenix contact wha-gw-f2d2-0-as- z2-eth +1 more +3 more A vulnerability may allow remote attackers to read arbitrary files on the server of the WirelessHART-Gateway CVE-2021-33555 7.5 HighAugust 31, 2021
• hilscher rcx rtos, pepperl+fuchs ethernet io modules ice1-16, ethernet io modules ice1-8 +8 more +10 more Hilscher rcX RTOS: Wrong handling of the UDP checksum CVE-2021-20988 8.6 HighMay 13, 2021
• hilscher ethernet/ip core v2, ethernet\/ip adapter firmware, pepper+fuchs pcv/pxv/pgv +8 more +10 more Hilscher: EtherNet/IP stack crash for specific CIP service CVE-2021-20987 8.6 HighFebruary 16, 2021
• hilscher profinet io device, profinet io device firmware, pepper+fuchs ohv +28 more +30 more Hilscher: Denial of Service vulnerability in PROFINET IO Device CVE-2021-20986 7.5 HighFebruary 16, 2021
• m&m software fdtcontainer component, emerson rosemount transmitter interface software, m&m software dtmlinspector +5 more +7 more WAGO/M&M Software Deserialization of untrusted data in fdtCONTAINER component CVE-2020-12525 7.3 HighJanuary 22, 2021
• pepper+fuchs comtrol io-link master, pepperl-fuchs io-link master 4-eip firmware, io-link master 4-pnio firmware +10 more +12 more Pepper+Fuchs Comtrol IO-Link Master NULL Pointer Dereference CVE-2020-12514 6.6 MediumJanuary 22, 2021
• pepper+fuchs comtrol io-link master, pepperl-fuchs io-link master 4-eip firmware, io-link master 4-pnio firmware +10 more +12 more Pepper+Fuchs Comtrol IO-Link Master OS Command Injection CVE-2020-12513 EPSS 31.1% 7.5 HighJanuary 22, 2021
• pepper+fuchs comtrol io-link master, pepperl-fuchs io-link master 4-eip firmware, io-link master 4-pnio firmware +10 more +12 more Pepper+Fuchs Comtrol IO-Link Master Cross-Site Scripting CVE-2020-12512 7.5 HighJanuary 22, 2021
• pepper+fuchs comtrol io-link master, pepperl-fuchs io-link master 4-eip firmware, io-link master 4-pnio firmware +10 more +12 more Pepper+Fuchs Comtrol IO-Link Master Cross-Site Request Forgery CVE-2020-12511 8.8 HighJanuary 22, 2021
• pepperl+fuchs p+f comtrol rocketlinx, korenix jetnet, jetwave 2212g firmware +29 more +31 more Pepperl+Fuchs improper authorization affects multiple Comtrol RocketLinx products CVE-2020-12504 9.8 CriticalOctober 15, 2020
• pepperl+fuchs p+f comtrol rocketlinx, korenix jetnet, jetnet 4510 firmware +28 more +30 more Pepperl+Fuchs improper authorization affects multiple Comtrol RocketLinx products CVE-2020-12503 EPSS 22.8% 7.2 HighOctober 15, 2020
• pepperl+fuchs p+f comtrol rocketlinx, korenix jetnet, jetnet 4510 firmware +23 more +25 more Pepperl+Fuchs improper authorization affects multiple Comtrol RocketLinx products CVE-2020-12502 8.8 HighOctober 15, 2020
• pepperl+fuchs p+f comtrol rocketlinx, korenix jetnet, jetnet4510 firmware +26 more +28 more Pepperl+Fuchs improper authorization affects multiple Comtrol RocketLinx products CVE-2020-12501 9.8 CriticalOctober 15, 2020
• pepperl+fuchs p+f comtrol rocketlinx, korenix jetnet, pepperl-fuchs es7506 firmware +13 more +15 more Pepperl+Fuchs improper authorization affects multiple Comtrol RocketLinx products CVE-2020-12500 9.8 CriticalOctober 15, 2020
• arm cortex-a12 firmware, cortex-a15 firmware, cortex-a17 firmware +306 more +308 more CVE-2017-5753 does not affect BellSoft software CVE-2017-5753 Public exploitFix available EPSS 93.8% 5.6 MediumJanuary 3, 2018