Description
Pepperl+Fuchs Comtrol IO-Link Master in Version 1.5.48 and below is prone to an authenticated blind OS Command Injection.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Pepper+Fuchs | Comtrol IO-Link Master | unspecified – ≤ 1.5.48 | — |
Advisories 2
- VDE-2020-038 Pepperl+Fuchs: Multiple vulnerabilites in Comtrol IO-Link Master CERT@VDE · May 14, 2025
- VDE-2020-040 Pepperl+Fuchs: Multiple Products prone to multiple vulnerabilities in Comtrol RocketLinux CERT@VDE · Oct 5, 2020