Description
An unauthenticated remote attacker may use a HTML injection vulnerability with limited length to inject malicious HTML code and gain low-privileged access on the affected device.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Pepperl+Fuchs | ICDM-RX/TCP-DB9/RJ45-DIN | SocketServer – ≤ 11.65 | — |
| Pepperl+Fuchs | ICDM-RX/TCP-ST/RJ45-DIN | SocketServer – ≤ 11.65 | — |
| Pepperl+Fuchs | ICDM-RX/TCP-4DB9/2RJ45-DIN | SocketServer – ≤ 11.65 | — |
| Pepperl+Fuchs | ICDM-RX/TCP-DB9/RJ45-PM | SocketServer – ≤ 11.65 | — |
| Pepperl+Fuchs | ICDM-RX/TCP-2DB9/RJ45-DIN | SocketServer – ≤ 11.65 | — |
| Pepperl+Fuchs | ICDM-RX/TCP-2ST/RJ45-DIN | SocketServer – ≤ 11.65 | — |
| Pepperl+Fuchs | ICDM-RX/TCP-4DB9/2RJ45-PM | SocketServer – ≤ 11.65 | — |
| Pepperl+Fuchs | ICDM-RX/TCP-8DB9/2RJ45-PM | SocketServer – ≤ 11.65 | — |
| Pepperl+Fuchs | ICDM-RX/TCP-16RJ45/RJ45-RM | SocketServer – ≤ 11.65 | — |
| Pepperl+Fuchs | ICDM-RX/TCP-16DB9/RJ45-RM | SocketServer – ≤ 11.65 | — |
| Pepperl+Fuchs | ICDM-RX/TCP-32RJ45/RJ45-RM | SocketServer – ≤ 11.65 | — |
| Pepperl+Fuchs | ICDM-RX/TCP-DB9/RJ45-PM2 | SocketServer – ≤ 11.65 | — |
| Pepperl+Fuchs | ICDM-RX/TCP-16RJ45/2RJ45-PM | SocketServer – ≤ 11.65 | — |
| Pepperl+Fuchs | ICDM-RX/PN-DB9/RJ45-DIN | PROFINET – ≤ v3.4.9 | — |
| Pepperl+Fuchs | ICDM-RX/PN-ST/RJ45-DIN | PROFINET – ≤ v3.4.9 | — |
| Pepperl+Fuchs | ICDM-RX/PN-4DB9/2RJ45-DIN | PROFINET – ≤ v3.4.9 | — |
| Pepperl+Fuchs | ICDM-RX/PN-DB9/RJ45-PM | PROFINET – ≤ v3.4.9 | — |
| Pepperl+Fuchs | ICDM-RX/PN-2DB9/RJ45-DIN | PROFINET – ≤ v3.4.9 | — |
| Pepperl+Fuchs | ICDM-RX/PN-2ST/RJ45-DIN | PROFINET – ≤ v3.4.9 | — |
| Pepperl+Fuchs | ICDM-RX/PN1-DB9/RJ45-PM | PROFINET/Modbus – ≤ v1.0.7 | — |
| Pepperl+Fuchs | ICDM-RX/PN1-DB9/RJ45-DIN | PROFINET/Modbus – ≤ v1.0.7 | — |
| Pepperl+Fuchs | ICDM-RX/PN1-ST/RJ45-DIN | PROFINET/Modbus – ≤ v1.0.7 | — |
| Pepperl+Fuchs | ICDM-RX/PN1-2DB9/RJ45-DIN | PROFINET/Modbus – ≤ v1.0.7 | — |
| Pepperl+Fuchs | ICDM-RX/PN1-4DB9/2RJ45-DIN | PROFINET/Modbus – ≤ v1.0.7 | — |
| Pepperl+Fuchs | ICDM-RX/PN1-2ST/RJ45-DIN | PROFINET/Modbus – ≤ v1.0.7 | — |
| Pepperl+Fuchs | ICDM-RX/EN-DB9/RJ45-DIN | EtherNet/IP – ≤ v7.22 | — |
| Pepperl+Fuchs | ICDM-RX/EN-ST/RJ45-DIN | EtherNet/IP – ≤ v7.22 | — |
| Pepperl+Fuchs | ICDM-RX/EN-4DB9/2RJ45-DIN | EtherNet/IP – ≤ v7.22 | — |
| Pepperl+Fuchs | ICDM-RX/EN-DB9/RJ45-PM | EtherNet/IP – ≤ v7.22 | — |
| Pepperl+Fuchs | ICDM-RX/EN-2DB9/RJ45-DIN | EtherNet/IP – ≤ v7.22 | — |
| Pepperl+Fuchs | ICDM-RX/EN-2ST/RJ45-DIN | EtherNet/IP – ≤ v7.22 | — |
| Pepperl+Fuchs | ICDM-RX/EN1-DB9/RJ45-PM | EIP/Modbus – ≤ v1.08 | — |
| Pepperl+Fuchs | ICDM-RX/EN1-DB9/RJ45-DIN | EIP/Modbus – ≤ v1.08 | — |
| Pepperl+Fuchs | ICDM-RX/EN1-ST/RJ45-DIN | EIP/Modbus – ≤ v1.08 | — |
| Pepperl+Fuchs | ICDM-RX/EN1-2DB9/RJ45-DIN | EIP/Modbus – ≤ v1.08 | — |
| Pepperl+Fuchs | ICDM-RX/EN1-4DB9/2RJ45-DIN | EIP/Modbus – ≤ v1.08 | — |
| Pepperl+Fuchs | ICDM-RX/EN1-2ST/RJ45-DIN | EIP/Modbus – ≤ v1.08 | — |
| Pepperl+Fuchs | ICDM-RX/MOD-DB9/RJ45-DIN | Modbus Router – ≤ v7.09, Modbus Server – ≤ v7.11, Modbus TCP – ≤ v7.11 | — |
| Pepperl+Fuchs | ICDM-RX/MOD-ST/RJ45-DIN | Modbus Router – ≤ v7.09, Modbus Server – ≤ v7.11, Modbus TCP – ≤ v7.11 | — |
| Pepperl+Fuchs | ICDM-RX/MOD-4DB9/2RJ45-DIN | Modbus Router – ≤ v7.09, Modbus Server – ≤ v7.11, Modbus TCP – ≤ v7.11 | — |
| Pepperl+Fuchs | ICDM-RX/MOD-DB9/RJ45-PM | Modbus Router – ≤ v7.09, Modbus Server – ≤ v7.11, Modbus TCP – ≤ v7.11 | — |
| Pepperl+Fuchs | ICDM-RX/MOD-2DB9/RJ45-DIN | Modbus Router – ≤ v7.09, Modbus Server – ≤ v7.11, Modbus TCP – ≤ v7.11 | — |
| Pepperl+Fuchs | ICDM-RX/MOD-2ST/RJ45-DIN | Modbus Router – ≤ v7.09, Modbus Server – ≤ v7.11, Modbus TCP – ≤ v7.11 | — |
| Pepperl+Fuchs | ICDM-RX/MOD-16RJ45/2RJ45-PM | Modbus Router – ≤ v7.09, Modbus Server – ≤ v7.11, Modbus TCP – ≤ v7.11 | — |