Unrated severityNVD Advisory· Published Aug 13, 2024· Updated Aug 13, 2024

Pepperl+Fuchs: Device Master ICDM-RX/* XSS vulnerability allows HTML injection

CVE-2024-38501

Description

An unauthenticated remote attacker may use a HTML injection vulnerability with limited length to inject malicious HTML code and gain low-privileged access on the affected device.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Pepperl+Fuchs/Icdm Rx/pn Db9/rj45 Pmv5
Range: PROFINET
Pepperl+Fuchs/Icdm Rx/en 2st/rj45 Dinv5
Range: EtherNet/IP
Pepperl+Fuchs/Icdm Rx/en1 2st/rj45 Dinv52 versions
EIP/Modbus+ 1 more
- (no CPE)range: EIP/Modbus
- (no CPE)range: EIP/Modbus
Pepperl+Fuchs/Icdm Rx/pn1 Db9/rj45 Pmv52 versions
EIP/Modbus+ 1 more
- (no CPE)range: EIP/Modbus
- (no CPE)range: PROFINET/Modbus
Pepperl+Fuchs/Icdm Rx/TCP 4db9/2rj45 Pmv5
Range: SocketServer

cvss	0.000
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000

Pepperl+Fuchs: Device Master ICDM-RX/* XSS vulnerability allows HTML injection

Description

AI Insight

Affected products

Patches

Vulnerability mechanics

References

News mentions