Skip to content
CVE PROGRAM SOURCE RECORD6.1 Medium

CVE-2024-38501

Pepperl+Fuchs: Device Master ICDM-RX/* XSS vulnerability allows HTML injection

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
CERTVDE

Description

An unauthenticated remote attacker may use a HTML injection vulnerability with limited length to inject malicious HTML code and gain low-privileged access on the affected device.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Pepperl+Fuchs ICDM-RX/TCP-DB9/RJ45-DIN

Default version status: unaffected

  • SocketServer to ≤ 11.65affected

Pepperl+Fuchs ICDM-RX/TCP-ST/RJ45-DIN

Default version status: unaffected

  • SocketServer to ≤ 11.65affected

Pepperl+Fuchs ICDM-RX/TCP-4DB9/2RJ45-DIN

Default version status: unaffected

  • SocketServer to ≤ 11.65affected

Pepperl+Fuchs ICDM-RX/TCP-DB9/RJ45-PM

Default version status: unaffected

  • SocketServer to ≤ 11.65affected

Pepperl+Fuchs ICDM-RX/TCP-2DB9/RJ45-DIN

Default version status: unaffected

  • SocketServer to ≤ 11.65affected

Pepperl+Fuchs ICDM-RX/TCP-2ST/RJ45-DIN

Default version status: unaffected

  • SocketServer to ≤ 11.65affected

Pepperl+Fuchs ICDM-RX/TCP-4DB9/2RJ45-PM

Default version status: unaffected

  • SocketServer to ≤ 11.65affected

Pepperl+Fuchs ICDM-RX/TCP-8DB9/2RJ45-PM

Default version status: unaffected

  • SocketServer to ≤ 11.65affected

Pepperl+Fuchs ICDM-RX/TCP-16RJ45/RJ45-RM

Default version status: unaffected

  • SocketServer to ≤ 11.65affected

Pepperl+Fuchs ICDM-RX/TCP-16DB9/RJ45-RM

Default version status: unaffected

  • SocketServer to ≤ 11.65affected

Pepperl+Fuchs ICDM-RX/TCP-32RJ45/RJ45-RM

Default version status: unaffected

  • SocketServer to ≤ 11.65affected

Pepperl+Fuchs ICDM-RX/TCP-DB9/RJ45-PM2

Default version status: unaffected

  • SocketServer to ≤ 11.65affected

Pepperl+Fuchs ICDM-RX/TCP-16RJ45/2RJ45-PM

Default version status: unaffected

  • SocketServer to ≤ 11.65affected

Pepperl+Fuchs ICDM-RX/PN-DB9/RJ45-DIN

Default version status: unaffected

  • PROFINET to ≤ v3.4.9affected

Pepperl+Fuchs ICDM-RX/PN-ST/RJ45-DIN

Default version status: unaffected

  • PROFINET to ≤ v3.4.9affected

Pepperl+Fuchs ICDM-RX/PN-4DB9/2RJ45-DIN

Default version status: unaffected

  • PROFINET to ≤ v3.4.9affected

Pepperl+Fuchs ICDM-RX/PN-DB9/RJ45-PM

Default version status: unaffected

  • PROFINET to ≤ v3.4.9affected

Pepperl+Fuchs ICDM-RX/PN-2DB9/RJ45-DIN

Default version status: unaffected

  • PROFINET to ≤ v3.4.9affected

Pepperl+Fuchs ICDM-RX/PN-2ST/RJ45-DIN

Default version status: unaffected

  • PROFINET to ≤ v3.4.9affected

Pepperl+Fuchs ICDM-RX/PN1-DB9/RJ45-PM

Default version status: unaffected

  • PROFINET/Modbus to ≤ v1.0.7affected

Pepperl+Fuchs ICDM-RX/PN1-DB9/RJ45-DIN

Default version status: unaffected

  • PROFINET/Modbus to ≤ v1.0.7affected

Pepperl+Fuchs ICDM-RX/PN1-ST/RJ45-DIN

Default version status: unaffected

  • PROFINET/Modbus to ≤ v1.0.7affected

Pepperl+Fuchs ICDM-RX/PN1-2DB9/RJ45-DIN

Default version status: unaffected

  • PROFINET/Modbus to ≤ v1.0.7affected

Pepperl+Fuchs ICDM-RX/PN1-4DB9/2RJ45-DIN

Default version status: unaffected

  • PROFINET/Modbus to ≤ v1.0.7affected

Pepperl+Fuchs ICDM-RX/PN1-2ST/RJ45-DIN

Default version status: unaffected

  • PROFINET/Modbus to ≤ v1.0.7affected

Pepperl+Fuchs ICDM-RX/EN-DB9/RJ45-DIN

Default version status: unaffected

  • EtherNet/IP to ≤ v7.22affected

Pepperl+Fuchs ICDM-RX/EN-ST/RJ45-DIN

Default version status: unaffected

  • EtherNet/IP to ≤ v7.22affected

Pepperl+Fuchs ICDM-RX/EN-4DB9/2RJ45-DIN

Default version status: unaffected

  • EtherNet/IP to ≤ v7.22affected

Pepperl+Fuchs ICDM-RX/EN-DB9/RJ45-PM

Default version status: unaffected

  • EtherNet/IP to ≤ v7.22affected

Pepperl+Fuchs ICDM-RX/EN-2DB9/RJ45-DIN

Default version status: unaffected

  • EtherNet/IP to ≤ v7.22affected

Pepperl+Fuchs ICDM-RX/EN-2ST/RJ45-DIN

Default version status: unaffected

  • EtherNet/IP to ≤ v7.22affected

Pepperl+Fuchs ICDM-RX/EN1-DB9/RJ45-PM

Default version status: unaffected

  • EIP/Modbus to ≤ v1.08affected

Pepperl+Fuchs ICDM-RX/EN1-DB9/RJ45-DIN

Default version status: unaffected

  • EIP/Modbus to ≤ v1.08affected

Pepperl+Fuchs ICDM-RX/EN1-ST/RJ45-DIN

Default version status: unaffected

  • EIP/Modbus to ≤ v1.08affected

Pepperl+Fuchs ICDM-RX/EN1-2DB9/RJ45-DIN

Default version status: unaffected

  • EIP/Modbus to ≤ v1.08affected

Pepperl+Fuchs ICDM-RX/EN1-4DB9/2RJ45-DIN

Default version status: unaffected

  • EIP/Modbus to ≤ v1.08affected

Pepperl+Fuchs ICDM-RX/EN1-2ST/RJ45-DIN

Default version status: unaffected

  • EIP/Modbus to ≤ v1.08affected

Pepperl+Fuchs ICDM-RX/MOD-DB9/RJ45-DIN

Default version status: unaffected

  • Modbus Router to ≤ v7.09affected
  • Modbus Server to ≤ v7.11affected
  • Modbus TCP to ≤ v7.11affected

Pepperl+Fuchs ICDM-RX/MOD-ST/RJ45-DIN

Default version status: unaffected

  • Modbus Router to ≤ v7.09affected
  • Modbus Server to ≤ v7.11affected
  • Modbus TCP to ≤ v7.11affected

Pepperl+Fuchs ICDM-RX/MOD-4DB9/2RJ45-DIN

Default version status: unaffected

  • Modbus Router to ≤ v7.09affected
  • Modbus Server to ≤ v7.11affected
  • Modbus TCP to ≤ v7.11affected

Pepperl+Fuchs ICDM-RX/MOD-DB9/RJ45-PM

Default version status: unaffected

  • Modbus Router to ≤ v7.09affected
  • Modbus Server to ≤ v7.11affected
  • Modbus TCP to ≤ v7.11affected

Pepperl+Fuchs ICDM-RX/MOD-2DB9/RJ45-DIN

Default version status: unaffected

  • Modbus Router to ≤ v7.09affected
  • Modbus Server to ≤ v7.11affected
  • Modbus TCP to ≤ v7.11affected

Pepperl+Fuchs ICDM-RX/MOD-2ST/RJ45-DIN

Default version status: unaffected

  • Modbus Router to ≤ v7.09affected
  • Modbus Server to ≤ v7.11affected
  • Modbus TCP to ≤ v7.11affected

Pepperl+Fuchs ICDM-RX/MOD-16RJ45/2RJ45-PM

Default version status: unaffected

  • Modbus Router to ≤ v7.09affected
  • Modbus Server to ≤ v7.11affected
  • Modbus TCP to ≤ v7.11affected

References