CVE-2024-5849

HIGH

pepperl-fuchs Firmware - Unauthenticated Reflected Cross-Site Scripting

Title source: llm
STIX 2.1

Description

An unauthenticated remote attacker may use a reflected XSS vulnerability to obtain information from a user or reboot the affected device once.

References (1)

Core 1
Core References

Scores

CVSS v3 7.1
EPSS 0.0036
EPSS Percentile 27.8%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L

CISA SSVC

Vulnrichment
Exploitation none
Automatable no
Technical Impact partial

Details

CWE
CWE-79
Status published
Products (8)
pepperl-fuchs/eip\/modbus_firmware < 1.08
pepperl-fuchs/ethernet\/ip_firmware < 7.22
pepperl-fuchs/icdm-rx\/tcp_socketserver_firmware < 11.65
pepperl-fuchs/modbus_router_firmware < 7.09
pepperl-fuchs/modbus_server_firmware < 7.11
pepperl-fuchs/modbus_tcp_firmware < 7.11
pepperl-fuchs/profinet\/modbus_firmware < 1.0.7
pepperl-fuchs/profinet_firmware < 3.4.9
Published Aug 13, 2024
Tracked Since Feb 18, 2026