CVE-2017-5753

hw: cpu: speculative execution bounds-check bypass

Systems with microprocessors utilizing speculative execution and branch prediction may allow unauthorized disclosure of information to an attacker with local user access via a side-channel analysis.

CVSS 3.1 · 5.6 Medium EPSS 93.8% KEV · Not listed

Vendors

Arm Canonical Debian and 11 more

Products

Cortex-a12 Cortex-a12 Firmware Cortex-a15 and 393 more

CVE-2024-6421

Pepperl+Fuchs: Incorrectly configured FTP-Server in OIT Products

An unauthenticated remote attacker can read out sensitive device information through a incorrectly configured FTP service.

CVSS 3.1 · 7.5 High EPSS < 1% KEV · Not listed

Vendors

Pepperl-fuchs

Products

Oit1500-f113-b12-cb Oit1500-f113-b12-cb Firmware Oit200-f113-b12-cb and 5 more

CVE-2024-6422

Pepperl+Fuchs: OIT Products can be manipulated via unintended Telnet access

An unauthenticated remote attacker can manipulate the device via Telnet, stop processes, read, delete and change data.

CVSS 3.1 · 9.8 Critical EPSS < 1% KEV · Not listed

Vendors

Pepperl-fuchs

Products

Oit1500-f113-b12-cb Oit1500-f113-b12-cb Firmware Oit200-f113-b12-cb and 5 more

CVE-2021-34565

In WirelessHART-Gateway versions 3.0.7 to 3.0.9 hard-coded credentials have been found

In PEPPERL+FUCHS WirelessHART-Gateway 3.0.7 to 3.0.9 the SSH and telnet services are active with hard-coded credentials.

CVSS 3.1 · 9.8 Critical EPSS 1.0% KEV · Not listed

Vendors

Pepperl-fuchs

Products

Wha-gw-f2d2-0-as-z2-eth Wha-gw-f2d2-0-as-z2-eth.eip Wha-gw-f2d2-0-as-z2-eth.eip Firmware and 1 more

CVE-2021-34564

In WirelessHART-Gateway versions 3.0.9 a vulnerability allows to read and write sensitive data in a cookie

Any cookie-stealing vulnerabilities within the application or browser would enable an attacker to steal the user's credentials to the PEPPERL+FUCHS WirelessHART-Gateway 3.0.9.

CVSS 3.1 · 5.5 Medium EPSS < 1% KEV · Not listed

Vendors

Pepperl-fuchs

Products

Wha-gw-f2d2-0-as- Z2-eth.eip Wha-gw-f2d2-0-as- Z2-eth.eip Firmware Wha-gw-f2d2-0-as-z2-eth and 1 more

CVE-2021-34563

In WirelessHART-Gateway versions 3.0.8 and 3.0.9 the HttpOnly flag is missing in a cookie which allows client-side javascript to modify it

In PEPPERL+FUCHS WirelessHART-Gateway 3.0.8 and 3.0.9 the HttpOnly attribute is not set on a cookie. This allows the cookie's value to be read or set by client-side JavaScript.

CVSS 3.1 · 3.3 Low EPSS < 1% KEV · Not listed

Vendors

Pepperl-fuchs

Products

Wha-gw-f2d2-0-as-z2-eth Wha-gw-f2d2-0-as-z2-eth.eip Wha-gw-f2d2-0-as-z2-eth.eip Firmware and 1 more

CVE-2021-34562

A vulnerability in WirelessHART-Gateway 3.0.8 it is possible to inject arbitrary JavaScript into the application's response

In PEPPERL+FUCHS WirelessHART-Gateway 3.0.8 it is possible to inject arbitrary JavaScript into the application's response.

CVSS 3.1 · 5.4 Medium EPSS < 1% KEV · Not listed

Vendors

Pepperl-fuchs

Products

Wha-gw-f2d2-0-as-z2-eth Wha-gw-f2d2-0-as-z2-eth.eip Wha-gw-f2d2-0-as-z2-eth.eip Firmware and 1 more

CVE-2021-34561

A vulnerability in WirelessHART-Gateway <= 3.0.8 allows to bypass any IP or firewall based access restrictions through DNS rebinding

In PEPPERL+FUCHS WirelessHART-Gateway <= 3.0.8 serious issue exists, if the application is not externally accessible or uses IP-based access restrictions. Attackers can use DNS Rebinding to bypass any IP or firewall based access restrictions that may be in place, by proxying through their target's browser.

CVSS 3.1 · 7.5 High EPSS < 1% KEV · Not listed

Vendors

Pepperl-fuchs

Products

Wha-gw-f2d2-0-as-z2-eth Wha-gw-f2d2-0-as-z2-eth.eip Wha-gw-f2d2-0-as-z2-eth.eip Firmware and 1 more

CVE-2021-34560

A vulnerability in WirelessHART-Gateway <= 3.0.9 could lead to information exposure of sensitive information

In PEPPERL+FUCHS WirelessHART-Gateway <= 3.0.9 a form contains a password field with autocomplete enabled. The stored credentials can be captured by an attacker who gains control over the user's computer. Therefore the user must have logged in at least once.

CVSS 3.1 · 5.5 Medium EPSS < 1% KEV · Not listed

Vendors

Pepperl-fuchs

Products

Wha-gw-f2d2-0-as-z2-eth Wha-gw-f2d2-0-as-z2-eth.eip Wha-gw-f2d2-0-as-z2-eth.eip Firmware and 1 more

CVE-2021-34559

A vulnerability in WirelessHART-Gateway <= 3.0.8 may allow remote attackers to rewrite links and URLs in cached pages to arbitrary strings

In PEPPERL+FUCHS WirelessHART-Gateway <= 3.0.8 a vulnerability may allow remote attackers to rewrite links and URLs in cached pages to arbitrary strings.

CVSS 3.1 · 5.4 Medium EPSS < 1% KEV · Not listed

Vendors

Pepperl-fuchs

Products

Wha-gw-f2d2-0-as-z2-eth Wha-gw-f2d2-0-as-z2-eth.eip Wha-gw-f2d2-0-as-z2-eth.eip Firmware and 1 more

CVE-2021-33555

A vulnerability may allow remote attackers to read arbitrary files on the server of the WirelessHART-Gateway

In PEPPERL+FUCHS WirelessHART-Gateway <= 3.0.7 the filename parameter is vulnerable to unauthenticated path traversal attacks, enabling read access to arbitrary files on the server.

CVSS 3.1 · 7.5 High EPSS 1.2% KEV · Not listed

Vendors

Pepperl-fuchs

Products

Wha-gw-f2d2-0-as- Z2-eth.eip Wha-gw-f2d2-0-as- Z2-eth.eip Firmware Wha-gw-f2d2-0-as-z2-eth and 1 more

CVE-2021-20988

Hilscher rcX RTOS: Wrong handling of the UDP checksum

In Hilscher rcX RTOS versions prios to V2.1.14.1 the actual UDP packet length is not verified against the length indicated by the packet. This may lead to a denial of service of the affected device.

CVSS 3.1 · 8.6 High EPSS < 1% KEV · Not listed

Vendors

Hilscher Pepperl-fuchs

Products

Rcx Rtos Ice1-16di-g60l-v1d Ice1-16di-g60l-v1d Firmware and 14 more

CVE-2021-20987

Hilscher: EtherNet/IP stack crash for specific CIP service

A denial of service and memory corruption vulnerability was found in Hilscher EtherNet/IP Core V2 prior to V2.13.0.21that may lead to code injection through network or make devices crash without recovery.

CVSS 3.1 · 8.6 High EPSS 1.2% KEV · Not listed

Vendors

Hilscher Pepperl-fuchs

Products

Ethernet\/ip Adapter Ethernet\/ip Adapter Firmware Pcv100-f200-b25-v1d-6011 and 20 more

CVE-2021-20986

Hilscher: Denial of Service vulnerability in PROFINET IO Device

A Denial of Service vulnerability was found in Hilscher PROFINET IO Device V3 in versions prior to V3.14.0.7. This may lead to unexpected loss of cyclic communication or interruption of acyclic communication.

CVSS 3.1 · 7.5 High EPSS 1.1% KEV · Not listed

Vendors

Hilscher Pepperl-fuchs

Products

Profinet Io Device Profinet Io Device Firmware Ohv-f230-b17 and 70 more

CVE-2020-12525

WAGO/M&M Software Deserialization of untrusted data in fdtCONTAINER component

M&M Software fdtCONTAINER Component in versions below 3.5.20304.x and between 3.6 and 3.6.20304.x is vulnerable to deserialization of untrusted data in its project storage.

CVSS 3.1 · 7.3 High EPSS 1.4% KEV · Not listed

Vendors

Emerson Pepperl-fuchs Wago and 1 more

Products

Rosemount Transmitter Interface Software Io-link Master 4-eip Io-link Master 4-pnio and 16 more

CVE-2020-12514

Pepper+Fuchs Comtrol IO-Link Master NULL Pointer Dereference

Pepperl+Fuchs Comtrol IO-Link Master in Version 1.5.48 and below is prone to a NULL Pointer Dereference that leads to a DoS in discoveryd

CVSS 3.1 · 6.6 Medium EPSS 1.0% KEV · Not listed

Vendors

Pepperl-fuchs

Products

Io-link Master 4-eip Io-link Master 4-eip Firmware Io-link Master 4-pnio and 21 more

CVE-2020-12513

Pepper+Fuchs Comtrol IO-Link Master OS Command Injection

Pepperl+Fuchs Comtrol IO-Link Master in Version 1.5.48 and below is prone to an authenticated blind OS Command Injection.

CVSS 3.1 · 7.5 High EPSS 31.1% KEV · Not listed

Vendors

Pepperl-fuchs

Products

Io-link Master 4-eip Io-link Master 4-eip Firmware Io-link Master 4-pnio and 21 more

CVE-2020-12512

Pepper+Fuchs Comtrol IO-Link Master Cross-Site Scripting

Pepperl+Fuchs Comtrol IO-Link Master in Version 1.5.48 and below is prone to an authenticated reflected POST Cross-Site Scripting

CVSS 3.1 · 7.5 High EPSS < 1% KEV · Not listed

Vendors

Pepperl-fuchs

Products

Io-link Master 4-eip Io-link Master 4-eip Firmware Io-link Master 4-pnio and 21 more

CVE-2020-12511

Pepper+Fuchs Comtrol IO-Link Master Cross-Site Request Forgery

Pepperl+Fuchs Comtrol IO-Link Master in Version 1.5.48 and below is prone to a Cross-Site Request Forgery (CSRF) in the web interface.

CVSS 3.1 · 8.8 High EPSS < 1% KEV · Not listed

Vendors

Pepperl-fuchs

Products

Io-link Master 4-eip Io-link Master 4-eip Firmware Io-link Master 4-pnio and 21 more

CVE-2020-12504

Pepperl+Fuchs improper authorization affects multiple Comtrol RocketLinx products

Improper Authorization vulnerability of Pepperl+Fuchs P+F Comtrol RocketLinx ES7510-XT, ES8509-XT, ES8510-XT, ES9528-XTv2, ES7506, ES7510, ES7528, ES8508, ES8508F, ES8510, ES8510-XTE, ES9528/ES9528-XT (all versions) and ICRL-M-8RJ45/4SFP-G-DIN, ICRL-M-16RJ45/4CP-G-DIN FW 1.2.3 and below has an active TFTP-Service.

CVSS 3.1 · 9.8 Critical EPSS 3.0% KEV · Not listed

Vendors

Korenix Pepperl-fuchs Westermo

Products

Jetwave 2212g Jetwave 2212g Firmware Jetwave 2212s and 55 more