Medium · 6.1 CVE-2025-1985 EUVD-2025-27684GHSA-36jp-c3g9-9g26

PEPPERL+FUCHS: Profinet Gateway LB8122A.1.EL – Device is affected by XSS vulnerability

Published May 26, 2025 · Updated May 27, 2025 · Assigned by CERTVDE

Vendor: Pepperl+Fuchs Product: Profinet Gateway FB8122A.1.EL Product: Profinet Gateway LB8122A.1.EL

Description

Due to improper neutralization of input during web page generation (XSS) an unauthenticated remote attacker can inject HTML code into the Web-UI in the affected device.

Affected products

Vendor	Product	Affected	Fixed
Pepperl+Fuchs	Profinet Gateway FB8122A.1.EL	< V1.3.13	V1.3.13
Pepperl+Fuchs	Profinet Gateway LB8122A.1.EL	< V1.3.13	V1.3.13

Advisories 1

VDE-2025-011 PEPPERL+FUCHS: Profinet Gateway LB8122A.1.EL – Device is affected by XSS vulnerability and information disclosure CERT@VDE · Aug 27, 2025

References

https://cert.vde.com/en/advisories/VDE-2025-011