high7.1
CVE-2024-38502
An unauthenticated remote attacker may use stored XSS vulnerability to obtain information from a user or reboot the affected device once.
Impact
An unauthenticated remote attacker may use stored XSS vulnerability to obtain information from a user or reboot the affected device once.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Pepperl-Fuchs | Icdm-Rx\/Tcp Socketserver Firmware | before 11.65 |
| Pepperl-Fuchs | Profinet Firmware | before 3.4.9 |
| Pepperl-Fuchs | Profinet\/Modbus Firmware | before 1.0.7 |
| Pepperl-Fuchs | Modbus Router Firmware | before 7.09 |
| Pepperl-Fuchs | Modbus Server Firmware | before 7.11 |
| Pepperl-Fuchs | Modbus Tcp Firmware | before 7.11 |
| Pepperl-Fuchs | Ethernet\/Ip Firmware | before 7.22 |
| Pepperl-Fuchs | Eip\/Modbus Firmware | before 1.08 |