An unauthenticated remote attacker may use a reflected XSS vulnerability to obtain information from a user or reboot the affected device once.
History

Thu, 22 Aug 2024 14:00:00 +0000

Type Values Removed Values Added
First Time appeared Pepperl-fuchs
Pepperl-fuchs eip\/modbus Firmware
Pepperl-fuchs ethernet\/ip Firmware
Pepperl-fuchs icdm-rx\/en-2db9\/rj45-din
Pepperl-fuchs icdm-rx\/en-2st\/rj45-din
Pepperl-fuchs icdm-rx\/en-4db9\/2rj45-din
Pepperl-fuchs icdm-rx\/en-db9\/rj45-din
Pepperl-fuchs icdm-rx\/en-db9\/rj45-pm
Pepperl-fuchs icdm-rx\/en-st\/rj45-din
Pepperl-fuchs icdm-rx\/en1-2db9\/rj45-din
Pepperl-fuchs icdm-rx\/en1-2st\/rj45-din
Pepperl-fuchs icdm-rx\/en1-4db9\/2rj45-din
Pepperl-fuchs icdm-rx\/en1-db9\/rj45-din
Pepperl-fuchs icdm-rx\/en1-db9\/rj45-pm
Pepperl-fuchs icdm-rx\/en1-st\/rj45-din
Pepperl-fuchs icdm-rx\/mod-4db9\/2rj45-din
Pepperl-fuchs icdm-rx\/mod-db9\/rj45-din
Pepperl-fuchs icdm-rx\/mod-st\/rj45-din
Pepperl-fuchs icdm-rx\/pn-2db9\/rj45-din
Pepperl-fuchs icdm-rx\/pn-2st\/rj45-din
Pepperl-fuchs icdm-rx\/pn-4db9\/2rj45-din
Pepperl-fuchs icdm-rx\/pn-db9\/rj45-din
Pepperl-fuchs icdm-rx\/pn-db9\/rj45-pm
Pepperl-fuchs icdm-rx\/pn-st\/rj45-din
Pepperl-fuchs icdm-rx\/pn1-2db9\/rj45-din
Pepperl-fuchs icdm-rx\/pn1-2st\/rj45-din
Pepperl-fuchs icdm-rx\/pn1-4db9\/2rj45-din
Pepperl-fuchs icdm-rx\/pn1-db9\/rj45-din
Pepperl-fuchs icdm-rx\/pn1-db9\/rj45-pm
Pepperl-fuchs icdm-rx\/pn1-st\/rj45-din
Pepperl-fuchs icdm-rx\/tcp-16db9\/rj45-rm
Pepperl-fuchs icdm-rx\/tcp-16rj45\/2rj45-pm
Pepperl-fuchs icdm-rx\/tcp-16rj45\/rj45-rm
Pepperl-fuchs icdm-rx\/tcp-2db9\/rj45-din
Pepperl-fuchs icdm-rx\/tcp-2st\/rj45-din
Pepperl-fuchs icdm-rx\/tcp-32rj45\/rj45-rm
Pepperl-fuchs icdm-rx\/tcp-4db9\/2rj45-din
Pepperl-fuchs icdm-rx\/tcp-4db9\/2rj45-pm
Pepperl-fuchs icdm-rx\/tcp-8db9\/2rj45-pm
Pepperl-fuchs icdm-rx\/tcp-db9\/rj45-din
Pepperl-fuchs icdm-rx\/tcp-db9\/rj45-pm
Pepperl-fuchs icdm-rx\/tcp-db9\/rj45-pm2
Pepperl-fuchs icdm-rx\/tcp-st\/rj45-din
Pepperl-fuchs icdm-rx\/tcp Socketserver Firmware
Pepperl-fuchs modbus Router Firmware
Pepperl-fuchs modbus Server Firmware
Pepperl-fuchs modbus Tcp Firmware
Pepperl-fuchs profinet\/modbus Firmware
Pepperl-fuchs profinet Firmware
CPEs cpe:2.3:h:pepperl-fuchs:icdm-rx\/en-2db9\/rj45-din:-:*:*:*:*:*:*:*
cpe:2.3:h:pepperl-fuchs:icdm-rx\/en-2st\/rj45-din:-:*:*:*:*:*:*:*
cpe:2.3:h:pepperl-fuchs:icdm-rx\/en-4db9\/2rj45-din:-:*:*:*:*:*:*:*
cpe:2.3:h:pepperl-fuchs:icdm-rx\/en-db9\/rj45-din:-:*:*:*:*:*:*:*
cpe:2.3:h:pepperl-fuchs:icdm-rx\/en-db9\/rj45-pm:-:*:*:*:*:*:*:*
cpe:2.3:h:pepperl-fuchs:icdm-rx\/en-st\/rj45-din:-:*:*:*:*:*:*:*
cpe:2.3:h:pepperl-fuchs:icdm-rx\/en1-2db9\/rj45-din:-:*:*:*:*:*:*:*
cpe:2.3:h:pepperl-fuchs:icdm-rx\/en1-2st\/rj45-din:-:*:*:*:*:*:*:*
cpe:2.3:h:pepperl-fuchs:icdm-rx\/en1-4db9\/2rj45-din:-:*:*:*:*:*:*:*
cpe:2.3:h:pepperl-fuchs:icdm-rx\/en1-db9\/rj45-din:-:*:*:*:*:*:*:*
cpe:2.3:h:pepperl-fuchs:icdm-rx\/en1-db9\/rj45-pm:-:*:*:*:*:*:*:*
cpe:2.3:h:pepperl-fuchs:icdm-rx\/en1-st\/rj45-din:-:*:*:*:*:*:*:*
cpe:2.3:h:pepperl-fuchs:icdm-rx\/mod-4db9\/2rj45-din:-:*:*:*:*:*:*:*
cpe:2.3:h:pepperl-fuchs:icdm-rx\/mod-db9\/rj45-din:-:*:*:*:*:*:*:*
cpe:2.3:h:pepperl-fuchs:icdm-rx\/mod-st\/rj45-din:-:*:*:*:*:*:*:*
cpe:2.3:h:pepperl-fuchs:icdm-rx\/pn-2db9\/rj45-din:-:*:*:*:*:*:*:*
cpe:2.3:h:pepperl-fuchs:icdm-rx\/pn-2st\/rj45-din:-:*:*:*:*:*:*:*
cpe:2.3:h:pepperl-fuchs:icdm-rx\/pn-4db9\/2rj45-din:-:*:*:*:*:*:*:*
cpe:2.3:h:pepperl-fuchs:icdm-rx\/pn-db9\/rj45-din:-:*:*:*:*:*:*:*
cpe:2.3:h:pepperl-fuchs:icdm-rx\/pn-db9\/rj45-pm:-:*:*:*:*:*:*:*
cpe:2.3:h:pepperl-fuchs:icdm-rx\/pn-st\/rj45-din:-:*:*:*:*:*:*:*
cpe:2.3:h:pepperl-fuchs:icdm-rx\/pn1-2db9\/rj45-din:-:*:*:*:*:*:*:*
cpe:2.3:h:pepperl-fuchs:icdm-rx\/pn1-2st\/rj45-din:-:*:*:*:*:*:*:*
cpe:2.3:h:pepperl-fuchs:icdm-rx\/pn1-4db9\/2rj45-din:-:*:*:*:*:*:*:*
cpe:2.3:h:pepperl-fuchs:icdm-rx\/pn1-db9\/rj45-din:-:*:*:*:*:*:*:*
cpe:2.3:h:pepperl-fuchs:icdm-rx\/pn1-db9\/rj45-pm:-:*:*:*:*:*:*:*
cpe:2.3:h:pepperl-fuchs:icdm-rx\/pn1-st\/rj45-din:-:*:*:*:*:*:*:*
cpe:2.3:h:pepperl-fuchs:icdm-rx\/tcp-16db9\/rj45-rm:-:*:*:*:*:*:*:*
cpe:2.3:h:pepperl-fuchs:icdm-rx\/tcp-16rj45\/2rj45-pm:-:*:*:*:*:*:*:*
cpe:2.3:h:pepperl-fuchs:icdm-rx\/tcp-16rj45\/rj45-rm:-:*:*:*:*:*:*:*
cpe:2.3:h:pepperl-fuchs:icdm-rx\/tcp-2db9\/rj45-din:-:*:*:*:*:*:*:*
cpe:2.3:h:pepperl-fuchs:icdm-rx\/tcp-2st\/rj45-din:-:*:*:*:*:*:*:*
cpe:2.3:h:pepperl-fuchs:icdm-rx\/tcp-32rj45\/rj45-rm:-:*:*:*:*:*:*:*
cpe:2.3:h:pepperl-fuchs:icdm-rx\/tcp-4db9\/2rj45-din:-:*:*:*:*:*:*:*
cpe:2.3:h:pepperl-fuchs:icdm-rx\/tcp-4db9\/2rj45-pm:-:*:*:*:*:*:*:*
cpe:2.3:h:pepperl-fuchs:icdm-rx\/tcp-8db9\/2rj45-pm:-:*:*:*:*:*:*:*
cpe:2.3:h:pepperl-fuchs:icdm-rx\/tcp-db9\/rj45-din:-:*:*:*:*:*:*:*
cpe:2.3:h:pepperl-fuchs:icdm-rx\/tcp-db9\/rj45-pm2:-:*:*:*:*:*:*:*
cpe:2.3:h:pepperl-fuchs:icdm-rx\/tcp-db9\/rj45-pm:-:*:*:*:*:*:*:*
cpe:2.3:h:pepperl-fuchs:icdm-rx\/tcp-st\/rj45-din:-:*:*:*:*:*:*:*
cpe:2.3:o:pepperl-fuchs:eip\/modbus_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:pepperl-fuchs:ethernet\/ip_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:pepperl-fuchs:icdm-rx\/tcp_socketserver_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:pepperl-fuchs:modbus_router_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:pepperl-fuchs:modbus_server_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:pepperl-fuchs:modbus_tcp_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:pepperl-fuchs:profinet\/modbus_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:pepperl-fuchs:profinet_firmware:*:*:*:*:*:*:*:*
Vendors & Products Pepperl-fuchs
Pepperl-fuchs eip\/modbus Firmware
Pepperl-fuchs ethernet\/ip Firmware
Pepperl-fuchs icdm-rx\/en-2db9\/rj45-din
Pepperl-fuchs icdm-rx\/en-2st\/rj45-din
Pepperl-fuchs icdm-rx\/en-4db9\/2rj45-din
Pepperl-fuchs icdm-rx\/en-db9\/rj45-din
Pepperl-fuchs icdm-rx\/en-db9\/rj45-pm
Pepperl-fuchs icdm-rx\/en-st\/rj45-din
Pepperl-fuchs icdm-rx\/en1-2db9\/rj45-din
Pepperl-fuchs icdm-rx\/en1-2st\/rj45-din
Pepperl-fuchs icdm-rx\/en1-4db9\/2rj45-din
Pepperl-fuchs icdm-rx\/en1-db9\/rj45-din
Pepperl-fuchs icdm-rx\/en1-db9\/rj45-pm
Pepperl-fuchs icdm-rx\/en1-st\/rj45-din
Pepperl-fuchs icdm-rx\/mod-4db9\/2rj45-din
Pepperl-fuchs icdm-rx\/mod-db9\/rj45-din
Pepperl-fuchs icdm-rx\/mod-st\/rj45-din
Pepperl-fuchs icdm-rx\/pn-2db9\/rj45-din
Pepperl-fuchs icdm-rx\/pn-2st\/rj45-din
Pepperl-fuchs icdm-rx\/pn-4db9\/2rj45-din
Pepperl-fuchs icdm-rx\/pn-db9\/rj45-din
Pepperl-fuchs icdm-rx\/pn-db9\/rj45-pm
Pepperl-fuchs icdm-rx\/pn-st\/rj45-din
Pepperl-fuchs icdm-rx\/pn1-2db9\/rj45-din
Pepperl-fuchs icdm-rx\/pn1-2st\/rj45-din
Pepperl-fuchs icdm-rx\/pn1-4db9\/2rj45-din
Pepperl-fuchs icdm-rx\/pn1-db9\/rj45-din
Pepperl-fuchs icdm-rx\/pn1-db9\/rj45-pm
Pepperl-fuchs icdm-rx\/pn1-st\/rj45-din
Pepperl-fuchs icdm-rx\/tcp-16db9\/rj45-rm
Pepperl-fuchs icdm-rx\/tcp-16rj45\/2rj45-pm
Pepperl-fuchs icdm-rx\/tcp-16rj45\/rj45-rm
Pepperl-fuchs icdm-rx\/tcp-2db9\/rj45-din
Pepperl-fuchs icdm-rx\/tcp-2st\/rj45-din
Pepperl-fuchs icdm-rx\/tcp-32rj45\/rj45-rm
Pepperl-fuchs icdm-rx\/tcp-4db9\/2rj45-din
Pepperl-fuchs icdm-rx\/tcp-4db9\/2rj45-pm
Pepperl-fuchs icdm-rx\/tcp-8db9\/2rj45-pm
Pepperl-fuchs icdm-rx\/tcp-db9\/rj45-din
Pepperl-fuchs icdm-rx\/tcp-db9\/rj45-pm
Pepperl-fuchs icdm-rx\/tcp-db9\/rj45-pm2
Pepperl-fuchs icdm-rx\/tcp-st\/rj45-din
Pepperl-fuchs icdm-rx\/tcp Socketserver Firmware
Pepperl-fuchs modbus Router Firmware
Pepperl-fuchs modbus Server Firmware
Pepperl-fuchs modbus Tcp Firmware
Pepperl-fuchs profinet\/modbus Firmware
Pepperl-fuchs profinet Firmware

Thu, 15 Aug 2024 15:30:00 +0000

Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}


Tue, 13 Aug 2024 12:45:00 +0000

Type Values Removed Values Added
Description An unauthenticated remote attacker may use a reflected XSS vulnerability to obtain information from a user or reboot the affected device once.
Title Pepperl+Fuchs: Device Master ICDM-RX/* XSS vulnerability allows reflected XSS
Weaknesses CWE-79
References
Metrics cvssV3_1

{'score': 7.1, 'vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L'}


cve-icon MITRE

Status: PUBLISHED

Assigner: CERTVDE

Published: 2024-08-13T12:32:37.130Z

Updated: 2024-08-15T14:14:42.465Z

Reserved: 2024-06-11T07:44:37.199Z

Link: CVE-2024-5849

cve-icon Vulnrichment

Updated: 2024-08-15T14:14:38.301Z

cve-icon NVD

Status : Analyzed

Published: 2024-08-13T13:15:13.067

Modified: 2024-08-22T13:39:08.797

Link: CVE-2024-5849

cve-icon Redhat

No data.