← Back

CVE-2024-5849

nvd nist
Published: Aug 13, 2024Modified: Jun 17, 2026

JSON object

Loading...
7.1
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L
Exploitability: 2.8 / Impact: 3.7
Source: info@cert.vde.com (Secondary)

Description

An unauthenticated remote attacker may use a reflected XSS vulnerability to obtain information from a user or reboot the affected device once.

Affected (8)

Pepperl Fuchs
8 products
Icdm Rx/tcp Socketserver Firmware
Profinet Firmware
Profinet/modbus Firmware
Modbus Router Firmware
Modbus Server Firmware
Modbus Tcp Firmware
Ethernet/ip Firmware
Eip/modbus Firmware
Configuration A
1 vulnerable · 13 platform
Vulnerable SoftwareAffected Versions
Icdm Rx/tcp Socketserver Firmware
Before 11.65
Running on/withPlatform Versions
Pepperl Fuchs
Icdm Rx/tcp 16db9/rj45 Rm
All versions
Pepperl Fuchs
Icdm Rx/tcp 16rj45/2rj45 Pm
All versions
Pepperl Fuchs
Icdm Rx/tcp 16rj45/rj45 Rm
All versions
Pepperl Fuchs
Icdm Rx/tcp 2db9/rj45 Din
All versions
Pepperl Fuchs
Icdm Rx/tcp 2st/rj45 Din
All versions
Pepperl Fuchs
Icdm Rx/tcp 32rj45/rj45 Rm
All versions
Pepperl Fuchs
Icdm Rx/tcp 4db9/2rj45 Din
All versions
Pepperl Fuchs
Icdm Rx/tcp 4db9/2rj45 Pm
All versions
Pepperl Fuchs
Icdm Rx/tcp 8db9/2rj45 Pm
All versions
Pepperl Fuchs
Icdm Rx/tcp Db9/rj45 Din
All versions
Pepperl Fuchs
Icdm Rx/tcp Db9/rj45 Pm
All versions
Pepperl Fuchs
Icdm Rx/tcp Db9/rj45 Pm2
All versions
Pepperl Fuchs
Icdm Rx/tcp St/rj45 Din
All versions
Configuration B
1 vulnerable · 6 platform
Vulnerable SoftwareAffected Versions
Profinet Firmware
Before 3.4.9
Running on/withPlatform Versions
Pepperl Fuchs
Icdm Rx/pn 2db9/rj45 Din
All versions
Pepperl Fuchs
Icdm Rx/pn 2st/rj45 Din
All versions
Pepperl Fuchs
Icdm Rx/pn 4db9/2rj45 Din
All versions
Pepperl Fuchs
Icdm Rx/pn Db9/rj45 Din
All versions
Pepperl Fuchs
Icdm Rx/pn Db9/rj45 Pm
All versions
Pepperl Fuchs
Icdm Rx/pn St/rj45 Din
All versions
Configuration C
1 vulnerable · 6 platform
Vulnerable SoftwareAffected Versions
Profinet/modbus Firmware
Before 1.0.7
Running on/withPlatform Versions
Pepperl Fuchs
Icdm Rx/pn1 2db9/rj45 Din
All versions
Pepperl Fuchs
Icdm Rx/pn1 2st/rj45 Din
All versions
Pepperl Fuchs
Icdm Rx/pn1 4db9/2rj45 Din
All versions
Pepperl Fuchs
Icdm Rx/pn1 Db9/rj45 Din
All versions
Pepperl Fuchs
Icdm Rx/pn1 Db9/rj45 Pm
All versions
Pepperl Fuchs
Icdm Rx/pn1 St/rj45 Din
All versions
Configuration D
3 vulnerable · 3 platform
Vulnerable SoftwareAffected Versions
Modbus Router Firmware
Before 7.09
Modbus Server Firmware
Before 7.11
Modbus Tcp Firmware
Before 7.11
Running on/withPlatform Versions
Pepperl Fuchs
Icdm Rx/mod 4db9/2rj45 Din
All versions
Pepperl Fuchs
Icdm Rx/mod Db9/rj45 Din
All versions
Pepperl Fuchs
Icdm Rx/mod St/rj45 Din
All versions
Configuration E
1 vulnerable · 6 platform
Vulnerable SoftwareAffected Versions
Ethernet/ip Firmware
Before 7.22
Running on/withPlatform Versions
Pepperl Fuchs
Icdm Rx/en 2db9/rj45 Din
All versions
Pepperl Fuchs
Icdm Rx/en 2st/rj45 Din
All versions
Pepperl Fuchs
Icdm Rx/en 4db9/2rj45 Din
All versions
Pepperl Fuchs
Icdm Rx/en Db9/rj45 Din
All versions
Pepperl Fuchs
Icdm Rx/en Db9/rj45 Pm
All versions
Pepperl Fuchs
Icdm Rx/en St/rj45 Din
All versions
Configuration F
1 vulnerable · 6 platform
Vulnerable SoftwareAffected Versions
Eip/modbus Firmware
Before 1.08
Running on/withPlatform Versions
Pepperl Fuchs
Icdm Rx/en1 2db9/rj45 Din
All versions
Pepperl Fuchs
Icdm Rx/en1 2st/rj45 Din
All versions
Pepperl Fuchs
Icdm Rx/en1 4db9/2rj45 Din
All versions
Pepperl Fuchs
Icdm Rx/en1 Db9/rj45 Din
All versions
Pepperl Fuchs
Icdm Rx/en1 Db9/rj45 Pm
All versions
Pepperl Fuchs
Icdm Rx/en1 St/rj45 Din
All versions

Related CWEs

CWE-79
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.

References (1)

Source: info@cert.vde.com
Third Party Advisory

Timeline

No history available yet.