Pepperl+Fuchs vulnerabilities

34 vulnerabilities

Known vulnerabilities in Pepperl+Fuchs products, newest first, with CVSS severity, EPSS, KEV listings and ransomware use, across 62 products.

Products

50 of 62
8.6CVE-2021-20988hilscherrcx_rtos+10
EPSS score
0.99%
In Hilscher rcX RTOS versions prios to V2.1.14.1 the actual UDP packet length is not verified against the length indicated by the packet. This may lead to a denial of service of the affected device.6.1CVE-2025-1985pepperl+fuchsprofinet gateway fb8122a.1.el+1
EPSS score
0.30%
Due to improper neutralization of input during web page generation (XSS) an unauthenticated remote attacker can inject HTML code into the Web-UI in the affected device.7.5CVE-2025-41655pepperl+fuchsprofinet gateway fb8122a.1.el+1
EPSS score
0.47%
An unauthenticated remote attacker can access a URL which causes the device to reboot.8.2CVE-2025-41654pepperl+fuchsprofinet gateway fb8122a.1.el+1
EPSS score
0.41%
An unauthenticated remote attacker can access information about running processes via the SNMP protocol. The amount of returned data can trigger a reboot by the watchdog.9.8CVE-2020-12501korenixjetnet+15
EPSS score
3.34%
Improper Authorization vulnerability of Pepperl+Fuchs P+F Comtrol RocketLinx ES7510-XT, ES8509-XT, ES8510-XT, ES9528-XTv2, ES7506, ES7510, ES7528, ES8508, ES8508F, ES8510, ES8510-XTE, ES9528/ES9528-XT (all versions) use undocumented accounts.8.8CVE-2020-12502korenixjetnet+12
EPSS score
1.03%
Improper Authorization vulnerability of Pepperl+Fuchs P+F Comtrol RocketLinx ES7510-XT, ES8509-XT, ES8510-XT, ES9528-XTv2, ES7506, ES7510, ES7528, ES8508, ES8508F, ES8510, ES8510-XTE, ES9528/ES9528-XT (all versions) and ICRL-M-8RJ45/4SFP-G-DIN, ICRL-M-16RJ45/4CP-G-DIN FW 1.2.3 and below is prone to unauthenticated device administration.9.8CVE-2020-12500korenixjetnet+2
EPSS score
2.89%
Improper Authorization vulnerability of Pepperl+Fuchs P+F Comtrol RocketLinx ES7510-XT, ES8509-XT, ES8510-XT, ES9528-XTv2, ES7506, ES7510, ES7528, ES8508, ES8508F, ES8510, ES8510-XTE, ES9528/ES9528-XT (all versions) allows unauthenticated device administration.9.8CVE-2020-12504korenixjetnet+19
EPSS score
3.02%
Improper Authorization vulnerability of Pepperl+Fuchs P+F Comtrol RocketLinx ES7510-XT, ES8509-XT, ES8510-XT, ES9528-XTv2, ES7506, ES7510, ES7528, ES8508, ES8508F, ES8510, ES8510-XTE, ES9528/ES9528-XT (all versions) and ICRL-M-8RJ45/4SFP-G-DIN, ICRL-M-16RJ45/4CP-G-DIN FW 1.2.3 and below has an active TFTP-Service.7.2CVE-2020-12503korenixjetnet+17
EPSS score
22.83%
Improper Authorization vulnerability of Pepperl+Fuchs P+F Comtrol RocketLinx ES7510-XT, ES8509-XT, ES8510-XT, ES9528-XTv2, ES7506, ES7510, ES7528, ES8508, ES8508F, ES8510, ES8510-XTE, ES9528/ES9528-XT (all versions) and ICRL-M-8RJ45/4SFP-G-DIN, ICRL-M-16RJ45/4CP-G-DIN FW 1.2.3 and below is prone to multiple authenticated command injections.7.1CVE-2024-38502pepperl-fuchseip\/modbus_firmware+51
EPSS score
0.34%
An unauthenticated remote attacker may use stored XSS vulnerability to obtain information from a user or reboot the affected device once.6.1CVE-2024-38501pepperl-fuchseip\/modbus_firmware+51
EPSS score
0.33%
An unauthenticated remote attacker may use a HTML injection vulnerability with limited length to inject malicious HTML code and gain low-privileged access on the affected device.7.1CVE-2024-5849pepperl-fuchseip\/modbus_firmware+51
EPSS score
0.38%
An unauthenticated remote attacker may use a reflected XSS vulnerability to obtain information from a user or reboot the affected device once.7.5CVE-2024-6421pepperl-fuchsoit1500-f113-b12-cb_firmware+7
EPSS score
0.51%
An unauthenticated remote attacker can read out sensitive device information through a incorrectly configured FTP service.9.8CVE-2024-6422pepperl-fuchsoit1500-f113-b12-cb_firmware+7
EPSS score
0.59%
An unauthenticated remote attacker can manipulate the device via Telnet, stop processes, read, delete and change data.8.8CVE-2026-27547carlo gavazzi automationyl212cei8m1io+14
EPSS score
2.92%
A low-privileged remote attacker can exploit a command injection vulnerability in the /index.php/ajax/get_iodd_menu_info endpoint using valid user or operator credentials allowing execution of commands with root privileges on the device.9.8CVE-2026-27565carlo gavazzi automationyl212cei8m1io+14
EPSS score
0.97%
An unauthenticated remote attacker can upload a malicious IODD file that places and executes a shell script with root privileges. The shell script remains active even after a reboot.8.8CVE-2026-27550carlo gavazzi automationyl212cei8m1io+14
EPSS score
2.92%
A low-privileged remote attacker can exploit a command injection vulnerability in the Field_Shadow_Password class using operator credentials allowing execution of commands with root privileges on the device.7.2CVE-2026-27562carlo gavazzi automationyl212cei8m1io+14
EPSS score
2.73%
A high-privileged remote attacker can exploit a command injection vulnerability in the /api/iodd/config endpoint by sending a crafted PUT request with admin credentials allowing execution of commands with root privileges on the device.8.8CVE-2026-27551carlo gavazzi automationyl212cei8m1io+14
EPSS score
2.92%
A low-privileged remote attacker can exploit a command injection vulnerability in the /index.php/ajax/parameterManage endpoint using user credentials allowing execution of commands with root privileges on the device.7.2CVE-2026-27564carlo gavazzi automationyl212cei8m1io+14
EPSS score
2.73%
A high-privileged remote attacker can exploit a command injection vulnerability in the /api/datastorage/data endpoint by sending a PUT request with admin credentials allowing execution of commands with root privileges on the device.