Pepperl+fuchs vulnerabilities
34 CVEs and advisories name Pepperl+fuchs as an affected vendor, newest first. Follow it as a feed.
- CVE-2026-27565Remote code execution via uploading a malicious IODD file
- CVE-2026-27564Command Injection via PUT in /api/datastorage/data
- CVE-2026-27563Command Injection via GET in /api/datastorage/data
- CVE-2026-27562Command Injection via PUT in /api/iodd/config
- CVE-2026-27561Command Injection via GET in /api/iodd/config
- CVE-2026-27560Command Injection via DELETE in /api/status/data
- CVE-2026-27559Command Injection via GET in /api/status/data
- CVE-2026-27558Command Injection in /index.php/attached_devices_tab/ajax_remove_uploaded_iodd_files
- CVE-2026-27557Path Traversal in /index.php/view_uploaded_iodd_file
- CVE-2026-27556Local File Inclusion in /index.php/ajax/save_iodd_parameters
- CVE-2026-27555Local File Inclusion in /index.php/ajax/get_iodd_port_info
- CVE-2026-27554Command Injection in /index.php/ajax/save_iodd_parameters
- CVE-2026-27553Information Disclosure via Schema Path Manipulation
- CVE-2026-27552Unauthorized IODD File Upload due to Improper Authorization
- CVE-2026-27551Command Injection in /index.php/ajax/parameterManage
- CVE-2026-27550Command Injection in Field_Shadow_Password Class
- CVE-2026-27549Command Injection in /index.php/attached_devices_tab/do_upload
- CVE-2026-27548Command Injection in /index.php/ajax/get_iodd_port_info
- CVE-2026-27547Command Injection in /index.php/ajax/get_iodd_menu_info
- CVE-2026-27546Authentication Bypass in _account_log
- CVE-2025-41655PEPPERL+FUCHS: Attacker can cause a DoS via URL
- CVE-2025-41654PEPPERL+FUCHS: Profinet Gateway LB8122A.1.EL – Device is affected by information disclosure via the SNMP protocol
- CVE-2025-1985PEPPERL+FUCHS: Profinet Gateway LB8122A.1.EL – Device is affected by XSS vulnerability
- CVE-2024-38502Pepperl+Fuchs: Device Master ICDM-RX/* XSS vulnerability allows stored XSS
- CVE-2024-38501Pepperl+Fuchs: Device Master ICDM-RX/* XSS vulnerability allows HTML injection
- CVE-2024-5849Pepperl+Fuchs: Device Master ICDM-RX/* XSS vulnerability allows reflected XSS
- CVE-2024-6422Pepperl+Fuchs: OIT Products can be manipulated via unintended Telnet access
- CVE-2024-6421Pepperl+Fuchs: Incorrectly configured FTP-Server in OIT Products
- CVE-2021-20988Hilscher rcX RTOS: Wrong handling of the UDP checksum
- CVE-2020-12504Pepperl+Fuchs improper authorization affects multiple Comtrol RocketLinx products