Skip to content
OpenAdvisories
Critical · 9.8 CVE-2024-6422 EUVD-2024-47526GHSA-fc3j-5g75-8c22

Pepperl+Fuchs: OIT Products can be manipulated via unintended Telnet access

Published Jul 10, 2024 · Updated Aug 1, 2024 · Assigned by CERTVDE

Vendor: Pepperl+Fuchs Product: OIT1500-F113-B12-CB Product: OIT200-F113-B12-CB Product: OIT500-F113-B12-CB Product: OIT700-F113-B12-CB

Description

An unauthenticated remote attacker can manipulate the device via Telnet, stop processes, read, delete and change data.

Affected products

VendorProductAffectedFixed
Pepperl+Fuchs OIT1500-F113-B12-CB ≤ V2.11.0 —
Pepperl+Fuchs OIT200-F113-B12-CB ≤ V2.11.0 —
Pepperl+Fuchs OIT500-F113-B12-CB ≤ V2.11.0 —
Pepperl+Fuchs OIT700-F113-B12-CB ≤ V2.11.0 —

Advisories 1

References