CVE-2024-5849highCWE-79

CVE-2024-5849: high-severity vulnerability in Pepperl+Fuchs ICDM-RX/EN1-2DB9/RJ45-DIN

Pepperl+Fuchs: Device Master ICDM-RX/* XSS vulnerability allows reflected XSS

Published · Updated

Follow this CVE+ Monitor ICDM-RX/EN1-2DB9/RJ45-DIN+ Monitor ICDM-RX/EN1-2ST/RJ45-DIN

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

21Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackcvss 7.1epss 0.4%
An unauthenticated remote attacker may use a reflected XSS vulnerability to obtain information from a user or reboot the affected device once.
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L
Affected products
Pepperl+Fuchs · ICDM-RX/EN1-2DB9/RJ45-DINPepperl+Fuchs · ICDM-RX/EN1-2ST/RJ45-DINPepperl+Fuchs · ICDM-RX/EN1-4DB9/2RJ45-DINPepperl+Fuchs · ICDM-RX/EN1-DB9/RJ45-DINPepperl+Fuchs · ICDM-RX/EN1-DB9/RJ45-PMPepperl+Fuchs · ICDM-RX/EN1-ST/RJ45-DINPepperl+Fuchs · ICDM-RX/EN-2DB9/RJ45-DINPepperl+Fuchs · ICDM-RX/EN-2ST/RJ45-DINPepperl+Fuchs · ICDM-RX/EN-4DB9/2RJ45-DINPepperl+Fuchs · ICDM-RX/EN-DB9/RJ45-DINPepperl+Fuchs · ICDM-RX/EN-DB9/RJ45-PMPepperl+Fuchs · ICDM-RX/EN-ST/RJ45-DINPepperl+Fuchs · ICDM-RX/MOD-16RJ45/2RJ45-PMPepperl+Fuchs · ICDM-RX/MOD-2DB9/RJ45-DINPepperl+Fuchs · ICDM-RX/MOD-2ST/RJ45-DINPepperl+Fuchs · ICDM-RX/MOD-4DB9/2RJ45-DINPepperl+Fuchs · ICDM-RX/MOD-DB9/RJ45-DINPepperl+Fuchs · ICDM-RX/MOD-DB9/RJ45-PMPepperl+Fuchs · ICDM-RX/MOD-ST/RJ45-DINPepperl+Fuchs · ICDM-RX/PN1-2DB9/RJ45-DINPepperl+Fuchs · ICDM-RX/PN1-2ST/RJ45-DINPepperl+Fuchs · ICDM-RX/PN1-4DB9/2RJ45-DINPepperl+Fuchs · ICDM-RX/PN1-DB9/RJ45-DINPepperl+Fuchs · ICDM-RX/PN1-DB9/RJ45-PMPepperl+Fuchs · ICDM-RX/PN1-ST/RJ45-DINPepperl+Fuchs · ICDM-RX/PN-2DB9/RJ45-DINPepperl+Fuchs · ICDM-RX/PN-2ST/RJ45-DINPepperl+Fuchs · ICDM-RX/PN-4DB9/2RJ45-DINPepperl+Fuchs · ICDM-RX/PN-DB9/RJ45-DINPepperl+Fuchs · ICDM-RX/PN-DB9/RJ45-PMPepperl+Fuchs · ICDM-RX/PN-ST/RJ45-DINPepperl+Fuchs · ICDM-RX/TCP-16DB9/RJ45-RMPepperl+Fuchs · ICDM-RX/TCP-16RJ45/2RJ45-PMPepperl+Fuchs · ICDM-RX/TCP-16RJ45/RJ45-RMPepperl+Fuchs · ICDM-RX/TCP-2DB9/RJ45-DINPepperl+Fuchs · ICDM-RX/TCP-2ST/RJ45-DINPepperl+Fuchs · ICDM-RX/TCP-32RJ45/RJ45-RMPepperl+Fuchs · ICDM-RX/TCP-4DB9/2RJ45-DINPepperl+Fuchs · ICDM-RX/TCP-4DB9/2RJ45-PMPepperl+Fuchs · ICDM-RX/TCP-8DB9/2RJ45-PMPepperl+Fuchs · ICDM-RX/TCP-DB9/RJ45-DINPepperl+Fuchs · ICDM-RX/TCP-DB9/RJ45-PMPepperl+Fuchs · ICDM-RX/TCP-DB9/RJ45-PM2Pepperl+Fuchs · ICDM-RX/TCP-ST/RJ45-DIN
Related CVEs — Pepperl+Fuchs ICDM-RX/EN1-2DB9/RJ45-DIN

In the same product, most dangerous first.

CVE-2024-38502HIGHPepperl+Fuchs: Device Master ICDM-RX/* XSS vulnerability allows stored XSSEPSS 0.3%CVE-2024-38501MEDIUMPepperl+Fuchs: Device Master ICDM-RX/* XSS vulnerability allows HTML injectionEPSS 0.3%