← All advisories

Unrated severityNVD Advisory· Published Aug 13, 2024· Updated Aug 13, 2024

Pepperl+Fuchs: Device Master ICDM-RX/* XSS vulnerability allows stored XSS

CVE-2024-38502

Description

An unauthenticated remote attacker may use stored XSS vulnerability to obtain information from a user or reboot the affected device once.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

7

Pepperl+Fuchs/Icdm Rx/pn Db9/rj45 Pmv5
Range: PROFINET
Pepperl+Fuchs/Icdm Rx/en 2st/rj45 Dinv5
Range: EtherNet/IP
Pepperl+Fuchs/Icdm Rx/en1 2st/rj45 Dinv52 versions
EIP/Modbus+ 1 more
- (no CPE)range: EIP/Modbus
- (no CPE)range: EIP/Modbus
Pepperl+Fuchs/Icdm Rx/pn1 Db9/rj45 Pmv52 versions
EIP/Modbus+ 1 more
- (no CPE)range: EIP/Modbus
- (no CPE)range: PROFINET/Modbus
Pepperl+Fuchs/Icdm Rx/TCP 4db9/2rj45 Pmv5
Range: SocketServer

Patches

Vulnerability mechanics

References

1

cert.vde.com/en/advisories/VDE-2024-033mitre

News mentions

0

No linked articles in our index yet.