Skip to content
OpenAdvisories
High · 7.5 CVE-2024-6421 EUVD-2024-47525GHSA-x993-f873-7mgw

Pepperl+Fuchs: Incorrectly configured FTP-Server in OIT Products

Published Jul 10, 2024 · Updated Aug 22, 2025 · Assigned by CERTVDE

Vendor: Pepperl+Fuchs Product: OIT1500-F113-B12-CB Product: OIT200-F113-B12-CB Product: OIT500-F113-B12-CB Product: OIT700-F113-B12-CB

Description

An unauthenticated remote attacker can read out sensitive device information through a incorrectly configured FTP service.

Affected products

VendorProductAffectedFixed
Pepperl+Fuchs OIT1500-F113-B12-CB ≤ V2.11.0 —
Pepperl+Fuchs OIT200-F113-B12-CB ≤ V2.11.0 —
Pepperl+Fuchs OIT500-F113-B12-CB ≤ V2.11.0 —
Pepperl+Fuchs OIT700-F113-B12-CB ≤ V2.11.0 —

Advisories 1

References