Approved changes feed: RSS · Atom

cpe:2.3:a:pepperl+fuchs:profinet_gateway_fb8122a.1.el:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorPepperl+Fuchs (9739a350-3a1c-589a-a37f-50f3931ada7b)
ProductProfinet Gateway Fb8122A.1.El (4532a91e-1cb0-5f77-86a4-80f47717bd5f)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2025-41655 vulnerable 2026-06-03 15:01:14.951737 PEPPERL+FUCHS: Attacker can cause a DoS via URL
HIGH (7.5)
An unauthenticated remote attacker can access a URL which causes the device to reboot.
Published: 2025-05-26T08:22:13.883Z
Updated: 2025-05-27T14:25:34.580Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-41654 vulnerable 2026-06-03 15:01:14.950237 PEPPERL+FUCHS: Profinet Gateway LB8122A.1.EL – Device is affected by information disclosure via the SNMP protocol
HIGH (8.2)
An unauthenticated remote attacker can access information about running processes via the SNMP protocol. The amount of returned data can trigger a reboot by the watchdog.
Published: 2025-05-26T08:21:54.033Z
Updated: 2025-08-22T09:18:26.543Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-1985 vulnerable 2026-06-03 14:59:06.966003 PEPPERL+FUCHS: Profinet Gateway LB8122A.1.EL – Device is affected by XSS vulnerability
MEDIUM (6.1)
Due to improper neutralization of input during web page generation (XSS) an unauthenticated remote attacker can inject HTML code into the Web-UI in the affected device.
Published: 2025-05-26T08:21:34.217Z
Updated: 2025-05-27T14:18:17.838Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.