← CVE Intelligence

CVE-2024-38502

Pepperl+Fuchs: Device Master ICDM-RX/* XSS vulnerability allows stored XSS PUBLISHED

Description (CNA)

An unauthenticated remote attacker may use stored XSS vulnerability to obtain information from a user or reboot the affected device once.

Affected (CNA)

Vendor / productVersions
Pepperl+Fuchs / ICDM-RX/TCP-DB9/RJ45-DINaffected SocketServer through 11.65
Pepperl+Fuchs / ICDM-RX/TCP-ST/RJ45-DINaffected SocketServer through 11.65
Pepperl+Fuchs / ICDM-RX/TCP-4DB9/2RJ45-DINaffected SocketServer through 11.65
Pepperl+Fuchs / ICDM-RX/TCP-DB9/RJ45-PMaffected SocketServer through 11.65
Pepperl+Fuchs / ICDM-RX/TCP-2DB9/RJ45-DINaffected SocketServer through 11.65
Pepperl+Fuchs / ICDM-RX/TCP-2ST/RJ45-DINaffected SocketServer through 11.65
Pepperl+Fuchs / ICDM-RX/TCP-4DB9/2RJ45-PMaffected SocketServer through 11.65
Pepperl+Fuchs / ICDM-RX/TCP-8DB9/2RJ45-PMaffected SocketServer through 11.65
Pepperl+Fuchs / ICDM-RX/TCP-16RJ45/RJ45-RMaffected SocketServer through 11.65
Pepperl+Fuchs / ICDM-RX/TCP-16DB9/RJ45-RMaffected SocketServer through 11.65
Pepperl+Fuchs / ICDM-RX/TCP-32RJ45/RJ45-RMaffected SocketServer through 11.65
Pepperl+Fuchs / ICDM-RX/TCP-DB9/RJ45-PM2affected SocketServer through 11.65
Pepperl+Fuchs / ICDM-RX/TCP-16RJ45/2RJ45-PMaffected SocketServer through 11.65
Pepperl+Fuchs / ICDM-RX/PN-DB9/RJ45-DINaffected PROFINET through v3.4.9
Pepperl+Fuchs / ICDM-RX/PN-ST/RJ45-DINaffected PROFINET through v3.4.9
Pepperl+Fuchs / ICDM-RX/PN-4DB9/2RJ45-DINaffected PROFINET through v3.4.9
Pepperl+Fuchs / ICDM-RX/PN-DB9/RJ45-PMaffected PROFINET through v3.4.9
Pepperl+Fuchs / ICDM-RX/PN-2DB9/RJ45-DINaffected PROFINET through v3.4.9
Pepperl+Fuchs / ICDM-RX/PN-2ST/RJ45-DINaffected PROFINET through v3.4.9
Pepperl+Fuchs / ICDM-RX/PN1-DB9/RJ45-PMaffected PROFINET/Modbus through v1.0.7
Pepperl+Fuchs / ICDM-RX/PN1-DB9/RJ45-DINaffected PROFINET/Modbus through v1.0.7
Pepperl+Fuchs / ICDM-RX/PN1-ST/RJ45-DINaffected PROFINET/Modbus through v1.0.7
Pepperl+Fuchs / ICDM-RX/PN1-2DB9/RJ45-DINaffected PROFINET/Modbus through v1.0.7
Pepperl+Fuchs / ICDM-RX/PN1-4DB9/2RJ45-DINaffected PROFINET/Modbus through v1.0.7
Pepperl+Fuchs / ICDM-RX/PN1-2ST/RJ45-DINaffected PROFINET/Modbus through v1.0.7
Pepperl+Fuchs / ICDM-RX/EN-DB9/RJ45-DINaffected EtherNet/IP through v7.22
Pepperl+Fuchs / ICDM-RX/EN-ST/RJ45-DINaffected EtherNet/IP through v7.22
Pepperl+Fuchs / ICDM-RX/EN-4DB9/2RJ45-DINaffected EtherNet/IP through v7.22
Pepperl+Fuchs / ICDM-RX/EN-DB9/RJ45-PMaffected EtherNet/IP through v7.22
Pepperl+Fuchs / ICDM-RX/EN-2DB9/RJ45-DINaffected EtherNet/IP through v7.22
Pepperl+Fuchs / ICDM-RX/EN-2ST/RJ45-DINaffected EtherNet/IP through v7.22
Pepperl+Fuchs / ICDM-RX/EN1-DB9/RJ45-PMaffected EIP/Modbus through v1.08
Pepperl+Fuchs / ICDM-RX/EN1-DB9/RJ45-DINaffected EIP/Modbus through v1.08
Pepperl+Fuchs / ICDM-RX/EN1-ST/RJ45-DINaffected EIP/Modbus through v1.08
Pepperl+Fuchs / ICDM-RX/EN1-2DB9/RJ45-DINaffected EIP/Modbus through v1.08
Pepperl+Fuchs / ICDM-RX/EN1-4DB9/2RJ45-DINaffected EIP/Modbus through v1.08
Pepperl+Fuchs / ICDM-RX/EN1-2ST/RJ45-DINaffected EIP/Modbus through v1.08
Pepperl+Fuchs / ICDM-RX/MOD-DB9/RJ45-DINaffected Modbus Router through v7.09; affected Modbus Server through v7.11; affected Modbus TCP through v7.11
Pepperl+Fuchs / ICDM-RX/MOD-ST/RJ45-DINaffected Modbus Router through v7.09; affected Modbus Server through v7.11; affected Modbus TCP through v7.11
Pepperl+Fuchs / ICDM-RX/MOD-4DB9/2RJ45-DINaffected Modbus Router through v7.09; affected Modbus Server through v7.11; affected Modbus TCP through v7.11
Pepperl+Fuchs / ICDM-RX/MOD-DB9/RJ45-PMaffected Modbus Router through v7.09; affected Modbus Server through v7.11; affected Modbus TCP through v7.11
Pepperl+Fuchs / ICDM-RX/MOD-2DB9/RJ45-DINaffected Modbus Router through v7.09; affected Modbus Server through v7.11; affected Modbus TCP through v7.11
Pepperl+Fuchs / ICDM-RX/MOD-2ST/RJ45-DINaffected Modbus Router through v7.09; affected Modbus Server through v7.11; affected Modbus TCP through v7.11
Pepperl+Fuchs / ICDM-RX/MOD-16RJ45/2RJ45-PMaffected Modbus Router through v7.09; affected Modbus Server through v7.11; affected Modbus TCP through v7.11

CWE

CWE-79

References

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.