Approved changes feed: RSS · Atom

cpe:2.3:a:phoenix_contact:iol_ma8_eip_di8:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorPhoenix Contact (bcce83d0-b267-5887-ab90-2a4405e0861d)
ProductIol Ma8 Eip Di8 (42e1705a-45bc-5aad-bbe8-2c5f12b2a246)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2026-27546 vulnerable 2026-10-13 12:29:30.491629 db.gcve.eu details are currently unavailable. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-27556 vulnerable 2026-10-13 12:29:30.195102 Local File Inclusion in /index.php/ajax/save_iodd_parameters
HIGH (8.8)
A low-privileged remote attacker can exploit a local file inclusion vulnerability in the /index.php/ajax/save_iodd_parameters endpoint using a valid operator cookie allowing execution of arbitrary PHP code on the device.
Published: 2026-09-16T07:50:20.465Z
Updated: 2026-09-16T18:36:10.529Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-27563 vulnerable 2026-10-13 12:29:30.084577 Command Injection via GET in /api/datastorage/data
HIGH (7.2)
A high-privileged remote attacker can exploit a command injection vulnerability in the /api/datastorage/data endpoint by sending a crafted GET request with admin credentials allowing execution of commands with root privileges on the device.
Published: 2026-09-16T07:52:04.884Z
Updated: 2026-09-18T17:37:15.462Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-27552 vulnerable 2026-10-13 12:29:30.057362 Unauthorized IODD File Upload due to Improper Authorization
HIGH (8.1)
A low-privileged remote attacker can exploit improper authorization in the /index.php/attached_devices_tab/do_upload endpoint to upload IODD files to the device, potentially altering device behavior or causing system crashes.
Published: 2026-09-16T07:49:32.300Z
Updated: 2026-09-16T14:53:49.707Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-27557 vulnerable 2026-10-13 12:29:29.975983 Path Traversal in /index.php/view_uploaded_iodd_file
HIGH (7.5)
An unauthenticated remote attacker can exploit a path traversal vulnerability in the /index.php/view_uploaded_iodd_file endpoint allowing the SSH server's private keys to be read.
Published: 2026-09-16T07:50:32.380Z
Updated: 2026-09-16T15:37:15.109Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-27562 vulnerable 2026-10-13 12:29:29.839500 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-27553 vulnerable 2026-10-13 12:29:29.820972 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-27547 vulnerable 2026-10-13 12:29:29.741232 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-27555 vulnerable 2026-10-13 12:29:29.477210 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-27564 vulnerable 2026-10-13 12:29:29.441951 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-27560 vulnerable 2026-10-13 12:29:29.219017 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-27551 vulnerable 2026-10-13 12:29:29.177644 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-27549 vulnerable 2026-10-13 12:29:29.129595 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-27559 vulnerable 2026-10-13 12:29:28.844631 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-27558 vulnerable 2026-10-13 12:29:28.531576 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-27554 vulnerable 2026-10-13 12:29:28.479498 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-27565 vulnerable 2026-10-13 12:29:28.449336 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-27561 vulnerable 2026-10-13 12:29:28.287330 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-27550 vulnerable 2026-10-13 12:29:28.240144 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-27548 vulnerable 2026-10-13 12:29:28.174097 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.