Pepperl+Fuchs: Device Master ICDM-RX/* XSS vulnerability allows HTML injection
An unauthenticated remote attacker may use a HTML injection vulnerability with limited length to inject malicious HTML code and gain low-privileged access on the affected device.
Scoped product and version facts
Fix information unknown; no fixed version is derived here. Missing information does not prove that no fix exists.
Exploitation unknown; this catalogue does not assess exploitation.
ICDM-RX/TCP-DB9/RJ45-DIN
Vendor
Pepperl+Fuchs
Product
ICDM-RX/TCP-DB9/RJ45-DIN
Platforms
Unknown
Default status
unaffected
ICDM-RX/TCP-DB9/RJ45-DIN · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
SocketServer
affected
semver
Unavailable
11.65
None listed
ICDM-RX/TCP-ST/RJ45-DIN
Vendor
Pepperl+Fuchs
Product
ICDM-RX/TCP-ST/RJ45-DIN
Platforms
Unknown
Default status
unaffected
ICDM-RX/TCP-ST/RJ45-DIN · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
SocketServer
affected
semver
Unavailable
11.65
None listed
ICDM-RX/TCP-4DB9/2RJ45-DIN
Vendor
Pepperl+Fuchs
Product
ICDM-RX/TCP-4DB9/2RJ45-DIN
Platforms
Unknown
Default status
unaffected
ICDM-RX/TCP-4DB9/2RJ45-DIN · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
SocketServer
affected
semver
Unavailable
11.65
None listed
ICDM-RX/TCP-DB9/RJ45-PM
Vendor
Pepperl+Fuchs
Product
ICDM-RX/TCP-DB9/RJ45-PM
Platforms
Unknown
Default status
unaffected
ICDM-RX/TCP-DB9/RJ45-PM · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
SocketServer
affected
semver
Unavailable
11.65
None listed
ICDM-RX/TCP-2DB9/RJ45-DIN
Vendor
Pepperl+Fuchs
Product
ICDM-RX/TCP-2DB9/RJ45-DIN
Platforms
Unknown
Default status
unaffected
ICDM-RX/TCP-2DB9/RJ45-DIN · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
SocketServer
affected
semver
Unavailable
11.65
None listed
ICDM-RX/TCP-2ST/RJ45-DIN
Vendor
Pepperl+Fuchs
Product
ICDM-RX/TCP-2ST/RJ45-DIN
Platforms
Unknown
Default status
unaffected
ICDM-RX/TCP-2ST/RJ45-DIN · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
SocketServer
affected
semver
Unavailable
11.65
None listed
ICDM-RX/TCP-4DB9/2RJ45-PM
Vendor
Pepperl+Fuchs
Product
ICDM-RX/TCP-4DB9/2RJ45-PM
Platforms
Unknown
Default status
unaffected
ICDM-RX/TCP-4DB9/2RJ45-PM · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
SocketServer
affected
semver
Unavailable
11.65
None listed
ICDM-RX/TCP-8DB9/2RJ45-PM
Vendor
Pepperl+Fuchs
Product
ICDM-RX/TCP-8DB9/2RJ45-PM
Platforms
Unknown
Default status
unaffected
ICDM-RX/TCP-8DB9/2RJ45-PM · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
SocketServer
affected
semver
Unavailable
11.65
None listed
ICDM-RX/TCP-16RJ45/RJ45-RM
Vendor
Pepperl+Fuchs
Product
ICDM-RX/TCP-16RJ45/RJ45-RM
Platforms
Unknown
Default status
unaffected
ICDM-RX/TCP-16RJ45/RJ45-RM · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
SocketServer
affected
semver
Unavailable
11.65
None listed
ICDM-RX/TCP-16DB9/RJ45-RM
Vendor
Pepperl+Fuchs
Product
ICDM-RX/TCP-16DB9/RJ45-RM
Platforms
Unknown
Default status
unaffected
ICDM-RX/TCP-16DB9/RJ45-RM · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
SocketServer
affected
semver
Unavailable
11.65
None listed
ICDM-RX/TCP-32RJ45/RJ45-RM
Vendor
Pepperl+Fuchs
Product
ICDM-RX/TCP-32RJ45/RJ45-RM
Platforms
Unknown
Default status
unaffected
ICDM-RX/TCP-32RJ45/RJ45-RM · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
SocketServer
affected
semver
Unavailable
11.65
None listed
ICDM-RX/TCP-DB9/RJ45-PM2
Vendor
Pepperl+Fuchs
Product
ICDM-RX/TCP-DB9/RJ45-PM2
Platforms
Unknown
Default status
unaffected
ICDM-RX/TCP-DB9/RJ45-PM2 · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
SocketServer
affected
semver
Unavailable
11.65
None listed
ICDM-RX/TCP-16RJ45/2RJ45-PM
Vendor
Pepperl+Fuchs
Product
ICDM-RX/TCP-16RJ45/2RJ45-PM
Platforms
Unknown
Default status
unaffected
ICDM-RX/TCP-16RJ45/2RJ45-PM · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
SocketServer
affected
semver
Unavailable
11.65
None listed
ICDM-RX/PN-DB9/RJ45-DIN
Vendor
Pepperl+Fuchs
Product
ICDM-RX/PN-DB9/RJ45-DIN
Platforms
Unknown
Default status
unaffected
ICDM-RX/PN-DB9/RJ45-DIN · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
PROFINET
affected
semver
Unavailable
v3.4.9
None listed
ICDM-RX/PN-ST/RJ45-DIN
Vendor
Pepperl+Fuchs
Product
ICDM-RX/PN-ST/RJ45-DIN
Platforms
Unknown
Default status
unaffected
ICDM-RX/PN-ST/RJ45-DIN · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
PROFINET
affected
semver
Unavailable
v3.4.9
None listed
ICDM-RX/PN-4DB9/2RJ45-DIN
Vendor
Pepperl+Fuchs
Product
ICDM-RX/PN-4DB9/2RJ45-DIN
Platforms
Unknown
Default status
unaffected
ICDM-RX/PN-4DB9/2RJ45-DIN · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
PROFINET
affected
semver
Unavailable
v3.4.9
None listed
ICDM-RX/PN-DB9/RJ45-PM
Vendor
Pepperl+Fuchs
Product
ICDM-RX/PN-DB9/RJ45-PM
Platforms
Unknown
Default status
unaffected
ICDM-RX/PN-DB9/RJ45-PM · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
PROFINET
affected
semver
Unavailable
v3.4.9
None listed
ICDM-RX/PN-2DB9/RJ45-DIN
Vendor
Pepperl+Fuchs
Product
ICDM-RX/PN-2DB9/RJ45-DIN
Platforms
Unknown
Default status
unaffected
ICDM-RX/PN-2DB9/RJ45-DIN · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
PROFINET
affected
semver
Unavailable
v3.4.9
None listed
ICDM-RX/PN-2ST/RJ45-DIN
Vendor
Pepperl+Fuchs
Product
ICDM-RX/PN-2ST/RJ45-DIN
Platforms
Unknown
Default status
unaffected
ICDM-RX/PN-2ST/RJ45-DIN · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
PROFINET
affected
semver
Unavailable
v3.4.9
None listed
ICDM-RX/PN1-DB9/RJ45-PM
Vendor
Pepperl+Fuchs
Product
ICDM-RX/PN1-DB9/RJ45-PM
Platforms
Unknown
Default status
unaffected
ICDM-RX/PN1-DB9/RJ45-PM · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
PROFINET/Modbus
affected
semver
Unavailable
v1.0.7
None listed
ICDM-RX/PN1-DB9/RJ45-DIN
Vendor
Pepperl+Fuchs
Product
ICDM-RX/PN1-DB9/RJ45-DIN
Platforms
Unknown
Default status
unaffected
ICDM-RX/PN1-DB9/RJ45-DIN · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
PROFINET/Modbus
affected
semver
Unavailable
v1.0.7
None listed
ICDM-RX/PN1-ST/RJ45-DIN
Vendor
Pepperl+Fuchs
Product
ICDM-RX/PN1-ST/RJ45-DIN
Platforms
Unknown
Default status
unaffected
ICDM-RX/PN1-ST/RJ45-DIN · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
PROFINET/Modbus
affected
semver
Unavailable
v1.0.7
None listed
ICDM-RX/PN1-2DB9/RJ45-DIN
Vendor
Pepperl+Fuchs
Product
ICDM-RX/PN1-2DB9/RJ45-DIN
Platforms
Unknown
Default status
unaffected
ICDM-RX/PN1-2DB9/RJ45-DIN · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
PROFINET/Modbus
affected
semver
Unavailable
v1.0.7
None listed
ICDM-RX/PN1-4DB9/2RJ45-DIN
Vendor
Pepperl+Fuchs
Product
ICDM-RX/PN1-4DB9/2RJ45-DIN
Platforms
Unknown
Default status
unaffected
ICDM-RX/PN1-4DB9/2RJ45-DIN · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
PROFINET/Modbus
affected
semver
Unavailable
v1.0.7
None listed
ICDM-RX/PN1-2ST/RJ45-DIN
Vendor
Pepperl+Fuchs
Product
ICDM-RX/PN1-2ST/RJ45-DIN
Platforms
Unknown
Default status
unaffected
ICDM-RX/PN1-2ST/RJ45-DIN · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
PROFINET/Modbus
affected
semver
Unavailable
v1.0.7
None listed
ICDM-RX/EN-DB9/RJ45-DIN
Vendor
Pepperl+Fuchs
Product
ICDM-RX/EN-DB9/RJ45-DIN
Platforms
Unknown
Default status
unaffected
ICDM-RX/EN-DB9/RJ45-DIN · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
EtherNet/IP
affected
semver
Unavailable
v7.22
None listed
ICDM-RX/EN-ST/RJ45-DIN
Vendor
Pepperl+Fuchs
Product
ICDM-RX/EN-ST/RJ45-DIN
Platforms
Unknown
Default status
unaffected
ICDM-RX/EN-ST/RJ45-DIN · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
EtherNet/IP
affected
semver
Unavailable
v7.22
None listed
ICDM-RX/EN-4DB9/2RJ45-DIN
Vendor
Pepperl+Fuchs
Product
ICDM-RX/EN-4DB9/2RJ45-DIN
Platforms
Unknown
Default status
unaffected
ICDM-RX/EN-4DB9/2RJ45-DIN · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
EtherNet/IP
affected
semver
Unavailable
v7.22
None listed
ICDM-RX/EN-DB9/RJ45-PM
Vendor
Pepperl+Fuchs
Product
ICDM-RX/EN-DB9/RJ45-PM
Platforms
Unknown
Default status
unaffected
ICDM-RX/EN-DB9/RJ45-PM · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
EtherNet/IP
affected
semver
Unavailable
v7.22
None listed
ICDM-RX/EN-2DB9/RJ45-DIN
Vendor
Pepperl+Fuchs
Product
ICDM-RX/EN-2DB9/RJ45-DIN
Platforms
Unknown
Default status
unaffected
ICDM-RX/EN-2DB9/RJ45-DIN · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
EtherNet/IP
affected
semver
Unavailable
v7.22
None listed
ICDM-RX/EN-2ST/RJ45-DIN
Vendor
Pepperl+Fuchs
Product
ICDM-RX/EN-2ST/RJ45-DIN
Platforms
Unknown
Default status
unaffected
ICDM-RX/EN-2ST/RJ45-DIN · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
EtherNet/IP
affected
semver
Unavailable
v7.22
None listed
ICDM-RX/EN1-DB9/RJ45-PM
Vendor
Pepperl+Fuchs
Product
ICDM-RX/EN1-DB9/RJ45-PM
Platforms
Unknown
Default status
unaffected
ICDM-RX/EN1-DB9/RJ45-PM · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
EIP/Modbus
affected
semver
Unavailable
v1.08
None listed
ICDM-RX/EN1-DB9/RJ45-DIN
Vendor
Pepperl+Fuchs
Product
ICDM-RX/EN1-DB9/RJ45-DIN
Platforms
Unknown
Default status
unaffected
ICDM-RX/EN1-DB9/RJ45-DIN · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
EIP/Modbus
affected
semver
Unavailable
v1.08
None listed
ICDM-RX/EN1-ST/RJ45-DIN
Vendor
Pepperl+Fuchs
Product
ICDM-RX/EN1-ST/RJ45-DIN
Platforms
Unknown
Default status
unaffected
ICDM-RX/EN1-ST/RJ45-DIN · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
EIP/Modbus
affected
semver
Unavailable
v1.08
None listed
ICDM-RX/EN1-2DB9/RJ45-DIN
Vendor
Pepperl+Fuchs
Product
ICDM-RX/EN1-2DB9/RJ45-DIN
Platforms
Unknown
Default status
unaffected
ICDM-RX/EN1-2DB9/RJ45-DIN · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
EIP/Modbus
affected
semver
Unavailable
v1.08
None listed
ICDM-RX/EN1-4DB9/2RJ45-DIN
Vendor
Pepperl+Fuchs
Product
ICDM-RX/EN1-4DB9/2RJ45-DIN
Platforms
Unknown
Default status
unaffected
ICDM-RX/EN1-4DB9/2RJ45-DIN · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
EIP/Modbus
affected
semver
Unavailable
v1.08
None listed
ICDM-RX/EN1-2ST/RJ45-DIN
Vendor
Pepperl+Fuchs
Product
ICDM-RX/EN1-2ST/RJ45-DIN
Platforms
Unknown
Default status
unaffected
ICDM-RX/EN1-2ST/RJ45-DIN · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
EIP/Modbus
affected
semver
Unavailable
v1.08
None listed
ICDM-RX/MOD-DB9/RJ45-DIN
Vendor
Pepperl+Fuchs
Product
ICDM-RX/MOD-DB9/RJ45-DIN
Platforms
Unknown
Default status
unaffected
ICDM-RX/MOD-DB9/RJ45-DIN · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
Modbus Router
affected
semver
Unavailable
v7.09
None listed
Modbus Server
affected
semver
Unavailable
v7.11
None listed
Modbus TCP
affected
semver
Unavailable
v7.11
None listed
ICDM-RX/MOD-ST/RJ45-DIN
Vendor
Pepperl+Fuchs
Product
ICDM-RX/MOD-ST/RJ45-DIN
Platforms
Unknown
Default status
unaffected
ICDM-RX/MOD-ST/RJ45-DIN · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
Modbus Router
affected
semver
Unavailable
v7.09
None listed
Modbus Server
affected
semver
Unavailable
v7.11
None listed
Modbus TCP
affected
semver
Unavailable
v7.11
None listed
ICDM-RX/MOD-4DB9/2RJ45-DIN
Vendor
Pepperl+Fuchs
Product
ICDM-RX/MOD-4DB9/2RJ45-DIN
Platforms
Unknown
Default status
unaffected
ICDM-RX/MOD-4DB9/2RJ45-DIN · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
Modbus Router
affected
semver
Unavailable
v7.09
None listed
Modbus Server
affected
semver
Unavailable
v7.11
None listed
Modbus TCP
affected
semver
Unavailable
v7.11
None listed
ICDM-RX/MOD-DB9/RJ45-PM
Vendor
Pepperl+Fuchs
Product
ICDM-RX/MOD-DB9/RJ45-PM
Platforms
Unknown
Default status
unaffected
ICDM-RX/MOD-DB9/RJ45-PM · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
Modbus Router
affected
semver
Unavailable
v7.09
None listed
Modbus Server
affected
semver
Unavailable
v7.11
None listed
Modbus TCP
affected
semver
Unavailable
v7.11
None listed
ICDM-RX/MOD-2DB9/RJ45-DIN
Vendor
Pepperl+Fuchs
Product
ICDM-RX/MOD-2DB9/RJ45-DIN
Platforms
Unknown
Default status
unaffected
ICDM-RX/MOD-2DB9/RJ45-DIN · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
Modbus Router
affected
semver
Unavailable
v7.09
None listed
Modbus Server
affected
semver
Unavailable
v7.11
None listed
Modbus TCP
affected
semver
Unavailable
v7.11
None listed
ICDM-RX/MOD-2ST/RJ45-DIN
Vendor
Pepperl+Fuchs
Product
ICDM-RX/MOD-2ST/RJ45-DIN
Platforms
Unknown
Default status
unaffected
ICDM-RX/MOD-2ST/RJ45-DIN · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
Modbus Router
affected
semver
Unavailable
v7.09
None listed
Modbus Server
affected
semver
Unavailable
v7.11
None listed
Modbus TCP
affected
semver
Unavailable
v7.11
None listed
ICDM-RX/MOD-16RJ45/2RJ45-PM
Vendor
Pepperl+Fuchs
Product
ICDM-RX/MOD-16RJ45/2RJ45-PM
Platforms
Unknown
Default status
unaffected
ICDM-RX/MOD-16RJ45/2RJ45-PM · Scoped product and version facts