Approved changes feed: RSS · Atom

cpe:2.3:h:phoenixcontact:rad-ism-900-en-bd-bus:-:*:*:*:*:*:*:*

part: h version: - update: *

VendorPhoenixcontact (ad43784c-598b-51b1-a640-9cd70ab4c265)
ProductRad Ism 900 En Bd Bus (5b4468dc-e932-5ae6-b65a-e4ba49a40ad1)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2022-29898 not_vulnerable 2026-06-08 05:42:49.601945 Remote Code Execution in all versions of various RAD-ISM-900-EN-* devices by PHOENIX CONTACT
CRITICAL (9.1)
On various RAD-ISM-900-EN-* devices by PHOENIX CONTACT an admin user could use the configuration file uploader in the WebUI to execute arbitrary code with root privileges on the OS due to an improper validation of an integrity check value in all versions of the firmware.
Published: 2022-05-11T14:25:24.072Z
Updated: 2024-09-16T19:15:11.050Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-29897 not_vulnerable 2026-06-08 05:42:49.601316 Remote Code Execution in all versions of various RAD-ISM-900-EN-* devices by PHOENIX CONTACT
CRITICAL (9.1)
On various RAD-ISM-900-EN-* devices by PHOENIX CONTACT an admin user could use the traceroute utility integrated in the WebUI to execute arbitrary code with root privileges on the OS due to an improper input validation in all versions of the firmware.
Published: 2022-05-11T14:25:22.545Z
Updated: 2024-09-17T04:03:58.341Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.