Approved changes feed: RSS · Atom

cpe:2.3:a:pepperl+fuchs:icdm-rx/en1-db9/rj45-pm:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorPepperl+Fuchs (9739a350-3a1c-589a-a37f-50f3931ada7b)
ProductIcdm Rx/En1 Db9/Rj45 Pm (dcbb6944-70a8-516e-982f-67294760cb1f)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2024-5849 vulnerable 2026-06-03 14:57:54.366673 Pepperl+Fuchs: Device Master ICDM-RX/* XSS vulnerability allows reflected XSS
HIGH (7.1)
An unauthenticated remote attacker may use a reflected XSS vulnerability to obtain information from a user or reboot the affected device once.
Published: 2024-08-13T12:32:37.130Z
Updated: 2024-08-15T14:14:42.465Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-38502 vulnerable 2026-06-03 14:56:18.811329 Pepperl+Fuchs: Device Master ICDM-RX/* XSS vulnerability allows stored XSS
HIGH (7.1)
An unauthenticated remote attacker may use stored XSS vulnerability to obtain information from a user or reboot the affected device once.
Published: 2024-08-13T12:33:30.908Z
Updated: 2024-08-13T13:28:24.550Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-38501 vulnerable 2026-06-03 14:56:18.757783 Pepperl+Fuchs: Device Master ICDM-RX/* XSS vulnerability allows HTML injection
MEDIUM (6.1)
An unauthenticated remote attacker may use a HTML injection vulnerability with limited length to inject malicious HTML code and gain low-privileged access on the affected device.
Published: 2024-08-13T12:33:00.703Z
Updated: 2024-08-13T13:31:52.009Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.