CVE-2025-1985 — PEPPERL+FUCHS: Profinet Gateway LB8122A.1.EL – Device is affected by XSS vulnerability

CVE-2025-1985

PEPPERL+FUCHS: Profinet Gateway LB8122A.1.EL – Device is affected by XSS vulnerability PUBLISHED

Description (CNA)

Due to improper neutralization of input during web page generation (XSS) an unauthenticated remote attacker can inject HTML code into the Web-UI in the affected device.

Affected (CNA)

Vendor / product	Versions
Pepperl+Fuchs / Profinet Gateway FB8122A.1.EL	affected 0 before V1.3.13
Pepperl+Fuchs / Profinet Gateway LB8122A.1.EL	affected 0 before V1.3.13

CWE

CWE-79

References

https://cert.vde.com/en/advisories/VDE-2025-011

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.