medium6.1
CVE-2024-38501
An unauthenticated remote attacker may use a HTML injection vulnerability with limited length to inject malicious HTML code and gain low-privileged access on t…
Impact
An unauthenticated remote attacker may use a HTML injection vulnerability with limited length to inject malicious HTML code and gain low-privileged access on the affected device.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Pepperl-Fuchs | Icdm-Rx\/Tcp Socketserver Firmware | before 11.65 |
| Pepperl-Fuchs | Profinet Firmware | before 3.4.9 |
| Pepperl-Fuchs | Profinet\/Modbus Firmware | before 1.0.7 |
| Pepperl-Fuchs | Modbus Router Firmware | before 7.09 |
| Pepperl-Fuchs | Modbus Server Firmware | before 7.11 |
| Pepperl-Fuchs | Modbus Tcp Firmware | before 7.11 |
| Pepperl-Fuchs | Ethernet\/Ip Firmware | before 7.22 |
| Pepperl-Fuchs | Eip\/Modbus Firmware | before 1.08 |