Skip to content
OpenAdvisories
High VDE-2025-011 3 CVEs

PEPPERL+FUCHS: Profinet Gateway LB8122A.1.EL – Device is affected by XSS vulnerability and information disclosure

Published May 26, 2025 · Updated Aug 27, 2025 · Revision 2

Vendor: Pepperl+Fuchs Product: FB8122A.1.EL Product: LB8122A.1.EL

Summary

A stored cross-site scripting vulnerability has been discovered in the profinet gateway LB8122A.1.EL. An attacker can write an HTML tag with up to 32 characters in the message field of a HART transmitter. The HTML tag is interpreted as HTML when the HART information is displayed in a webbrowser. If the HTML tag contains a link to a manipulated page, a user can be tricked into accessing this page.
Furthermore, an attacker can access information about running processes via the SNMP protocol. Sending such SNMP read commands can also trigger a reboot.

Details

Impact
An unauthenticated attacker can use a stored HTML link in a HART transmitter to redirect a user to a manipulated website. From there, he can manipulate the user's device or environment.
An attacker can collect information via SNMP to launch attacks. Sending the read commands can trigger a reboot of the device.

Remediation
Please install the updated firmware V1.3.13.

Mitigation
The web server is switched off by default and can only be switched on via the gateway display. It is then active for 5 minutes and switches itself off again.
- Ensure that only authorized personnel have access to the gateway.
- Only use the gateway in an isolated network environment.

Vulnerabilities 3

Revision history

  1. #1.1.0

    Update: CWE from CVE-2025-41654, Revision History

  2. #1.0.0

    Initial revision.

References