Pepperl Fuchs vulnerabilities
25 vulnerabilities
Known vulnerabilities in Pepperl Fuchs products, newest first, with CVSS severity, EPSS, KEV listings and ransomware use, across 84 products.
Products
50 of 84- Wha Gw F2D2 0 As Z2 Eth8 vulnerabilities
- Wha Gw F2D2 0 As Z2 Eth.Eip6 vulnerabilities
- Io Link Master 4 Eip4 vulnerabilities
- Io Link Master 4 Pnio4 vulnerabilities
- Io Link Master 8 Eip4 vulnerabilities
- Io Link Master 8 Eip L4 vulnerabilities
- Io Link Master 8 Pnio4 vulnerabilities
- Io Link Master 8 Pnio L4 vulnerabilities
- Io Link Master Dr 8 Eip4 vulnerabilities
- Io Link Master Dr 8 Eip P4 vulnerabilities
- Io Link Master Dr 8 Eip T4 vulnerabilities
- Io Link Master Dr 8 Pnio4 vulnerabilities
- Io Link Master Dr 8 Pnio P4 vulnerabilities
- Io Link Master Dr 8 Pnio T4 vulnerabilities
- Eip\/Modbus3 vulnerabilities
- Ethernet\/Ip3 vulnerabilities
- Icdm Rx\/Tcp Socketserver3 vulnerabilities
- Icrl M 16Rj45\/4Cp G Din3 vulnerabilities
- Icrl M 8Rj45\/4Sfp G Din3 vulnerabilities
- Modbus Router3 vulnerabilities
- Modbus Server3 vulnerabilities
- Modbus Tcp3 vulnerabilities
- Profinet3 vulnerabilities
- Profinet\/Modbus3 vulnerabilities
- Oit1500 F113 B12 Cb2 vulnerabilities
- Oit200 F113 B12 Cb2 vulnerabilities
- Oit500 F113 B12 Cb2 vulnerabilities
- Oit700 F113 B12 Cb2 vulnerabilities
- Wcs2 vulnerabilities
- Wha Gw F2D2 0 As Z2 Eth.Eip2 vulnerabilities
- Btc121 vulnerabilities
- Btc141 vulnerabilities
- Es7510 Xt1 vulnerabilities
- Es85101 vulnerabilities
- Ice1 16Di G60L V1D1 vulnerabilities
- Ice1 16Dio G60L C1 V1D1 vulnerabilities
- Ice1 16Dio G60L V1D1 vulnerabilities
- Ice1 8Di8Do G60L C1 V1D1 vulnerabilities
- Ice1 8Di8Do G60L V1D1 vulnerabilities
- Ice1 8Iol G30L V1D1 vulnerabilities
- Ice1 8Iol G60L V1D1 vulnerabilities
- Ice1 8Iol S2 G60L V1D1 vulnerabilities
- Io Link Master1 vulnerabilities
- Ohv F230 B171 vulnerabilities
- Oit500 F113B17 Cb1 vulnerabilities
- Pactware1 vulnerabilities
- Pcv100 F200 B17 V1D1 vulnerabilities
- Pcv100 F200 B17 V1D 60111 vulnerabilities
- Pcv100 F200 B17 V1D 6011 69971 vulnerabilities
- Pcv100 F200 B17 V1D 6011 82031 vulnerabilities
CVE-2021-20988hilscherrcx_rtos+10
EPSS score0.99%
In Hilscher rcX RTOS versions prios to V2.1.14.1 the actual UDP packet length is not verified against the length indicated by the packet. This may lead to a denial of service of the affected device.CVE-2021-20987hilscherethernet\/ip_adapter_firmware+10EPSS score1.14%
A denial of service and memory corruption vulnerability was found in Hilscher EtherNet/IP Core V2 prior to V2.13.0.21that may lead to code injection through network or make devices crash without recovery.CVE-2021-20986hilscherprofinet_io_device_firmware+29EPSS score1.04%
A Denial of Service vulnerability was found in Hilscher PROFINET IO Device V3 in versions prior to V3.14.0.7. This may lead to unexpected loss of cyclic communication or interruption of acyclic communication.CVE-2021-34563pepperl-fuchswha-gw-f2d2-0-as-z2-eth_firmware+3EPSS score0.24%
In PEPPERL+FUCHS WirelessHART-Gateway 3.0.8 and 3.0.9 the HttpOnly attribute is not set on a cookie. This allows the cookie's value to be read or set by client-side JavaScript.CVE-2021-34561pepperl-fuchswha-gw-f2d2-0-as-z2-eth_firmware+3EPSS score0.87%
In PEPPERL+FUCHS WirelessHART-Gateway <= 3.0.8 serious issue exists, if the application is not externally accessible or uses IP-based access restrictions. Attackers can use DNS Rebinding to bypass any IP or firewall based access restrictions that may be in place, by proxying through their target's browser.CVE-2021-34562pepperl-fuchswha-gw-f2d2-0-as-z2-eth_firmware+3EPSS score0.58%
In PEPPERL+FUCHS WirelessHART-Gateway 3.0.8 it is possible to inject arbitrary JavaScript into the application's response.CVE-2021-34565pepperl-fuchswha-gw-f2d2-0-as-z2-eth_firmware+3EPSS score1.03%
In PEPPERL+FUCHS WirelessHART-Gateway 3.0.7 to 3.0.9 the SSH and telnet services are active with hard-coded credentials.CVE-2021-34559pepperl-fuchswha-gw-f2d2-0-as-z2-eth_firmware+3EPSS score0.77%
In PEPPERL+FUCHS WirelessHART-Gateway <= 3.0.8 a vulnerability may allow remote attackers to rewrite links and URLs in cached pages to arbitrary strings.CVE-2021-34564pepperl-fuchswha-gw-f2d2-0-as-_z2-eth.eip_firmware+3EPSS score0.15%
Any cookie-stealing vulnerabilities within the application or browser would enable an attacker to steal the user's credentials to the PEPPERL+FUCHS WirelessHART-Gateway 3.0.9.CVE-2021-34560pepperl-fuchswha-gw-f2d2-0-as-z2-eth_firmware+3EPSS score0.21%
In PEPPERL+FUCHS WirelessHART-Gateway <= 3.0.9 a form contains a password field with autocomplete enabled. The stored credentials can be captured by an attacker who gains control over the user's computer. Therefore the user must have logged in at least once.CVE-2021-33555pepperl-fuchswha-gw-f2d2-0-as-_z2-eth.eip_firmware+3EPSS score1.21%
In PEPPERL+FUCHS WirelessHART-Gateway <= 3.0.7 the filename parameter is vulnerable to unauthenticated path traversal attacks, enabling read access to arbitrary files on the server.CVE-2020-12511pepper+fuchscomtrol io-link master+12EPSS score0.57%
Pepperl+Fuchs Comtrol IO-Link Master in Version 1.5.48 and below is prone to a Cross-Site Request Forgery (CSRF) in the web interface.CVE-2020-12525emersonrosemount_transmitter_interface_software+11EPSS score1.36%
M&M Software fdtCONTAINER Component in versions below 3.5.20304.x and between 3.6 and 3.6.20304.x is vulnerable to deserialization of untrusted data in its project storage.CVE-2020-12502korenixjetnet+12EPSS score1.03%
Improper Authorization vulnerability of Pepperl+Fuchs P+F Comtrol RocketLinx ES7510-XT, ES8509-XT, ES8510-XT, ES9528-XTv2, ES7506, ES7510, ES7528, ES8508, ES8508F, ES8510, ES8510-XTE, ES9528/ES9528-XT (all versions) and ICRL-M-8RJ45/4SFP-G-DIN, ICRL-M-16RJ45/4CP-G-DIN FW 1.2.3 and below is prone to unauthenticated device administration.CVE-2020-12504korenixjetnet+19EPSS score3.02%
Improper Authorization vulnerability of Pepperl+Fuchs P+F Comtrol RocketLinx ES7510-XT, ES8509-XT, ES8510-XT, ES9528-XTv2, ES7506, ES7510, ES7528, ES8508, ES8508F, ES8510, ES8510-XTE, ES9528/ES9528-XT (all versions) and ICRL-M-8RJ45/4SFP-G-DIN, ICRL-M-16RJ45/4CP-G-DIN FW 1.2.3 and below has an active TFTP-Service.CVE-2020-12512pepper+fuchscomtrol io-link master+12EPSS score0.73%
Pepperl+Fuchs Comtrol IO-Link Master in Version 1.5.48 and below is prone to an authenticated reflected POST Cross-Site ScriptingCVE-2020-12503korenixjetnet+17EPSS score22.83%
Improper Authorization vulnerability of Pepperl+Fuchs P+F Comtrol RocketLinx ES7510-XT, ES8509-XT, ES8510-XT, ES9528-XTv2, ES7506, ES7510, ES7528, ES8508, ES8508F, ES8510, ES8510-XTE, ES9528/ES9528-XT (all versions) and ICRL-M-8RJ45/4SFP-G-DIN, ICRL-M-16RJ45/4CP-G-DIN FW 1.2.3 and below is prone to multiple authenticated command injections.CVE-2020-12514pepper+fuchscomtrol io-link master+12EPSS score1.03%
Pepperl+Fuchs Comtrol IO-Link Master in Version 1.5.48 and below is prone to a NULL Pointer Dereference that leads to a DoS in discoverydCVE-2020-12513pepper+fuchscomtrol io-link master+12EPSS score31.11%
Pepperl+Fuchs Comtrol IO-Link Master in Version 1.5.48 and below is prone to an authenticated blind OS Command Injection.CVE-2017-5753alpineintel-ucode+375EPSS score93.84%
Systems with microprocessors utilizing speculative execution and branch prediction may allow unauthorized disclosure of information to an attacker with local user access via a side-channel analysis.