Vulnerabilidades en Pepperl+Fuchs

34 resultados
Análisis Vexday

A Pepperl+Fuchs possui 14 vulnerabilidades catalogadas, das quais 4 são críticas, mas nenhuma está sob ataque ativo no momento. A ausência de publicações nos últimos 90 dias indica que o risco atual é estável, embora a fraqueza dominante em autenticação insuficiente (CWE-306) exija atenção em processos de controle de acesso nos produtos da fabricante.

CVE-2026-27565CRITICALRemote code execution via uploading a malicious IODD fileEPSS 1.0%CVE-2026-27556HIGHLocal File Inclusion in /index.php/ajax/save_iodd_parametersEPSS 0.9%CVE-2026-27555HIGHLocal File Inclusion in /index.php/ajax/get_iodd_port_infoEPSS 0.9%CVE-2026-27557HIGHPath Traversal in /index.php/view_uploaded_iodd_fileEPSS 0.7%CVE-2026-27552HIGHUnauthorized IODD File Upload due to Improper AuthorizationEPSS 0.6%CVE-2024-6422CRITICALPepperl+Fuchs: OIT Products can be manipulated via unintended Telnet accessEPSS 0.6%CVE-2026-27553MEDIUMInformation Disclosure via Schema Path ManipulationEPSS 0.6%CVE-2024-6421HIGHPepperl+Fuchs: Incorrectly configured FTP-Server in OIT ProductsEPSS 0.5%CVE-2025-41655HIGHPEPPERL+FUCHS: Attacker can cause a DoS via URLEPSS 0.5%CVE-2025-41654HIGHPEPPERL+FUCHS: Profinet Gateway LB8122A.1.EL – Device is affected by information disclosure via the SNMP protocolEPSS 0.4%CVE-2024-5849HIGHPepperl+Fuchs: Device Master ICDM-RX/* XSS vulnerability allows reflected XSSEPSS 0.4%CVE-2024-38502HIGHPepperl+Fuchs: Device Master ICDM-RX/* XSS vulnerability allows stored XSSEPSS 0.3%CVE-2024-38501MEDIUMPepperl+Fuchs: Device Master ICDM-RX/* XSS vulnerability allows HTML injectionEPSS 0.3%CVE-2025-1985MEDIUMPEPPERL+FUCHS: Profinet Gateway LB8122A.1.EL – Device is affected by XSS vulnerabilityEPSS 0.3%