← Database

CVE-2024-38501

MEDIUM CVSS: 6.1 Published: 2024-08-13 Modified: 2026-06-17

Description

An unauthenticated remote attacker may use a HTML injection vulnerability with limited length to inject malicious HTML code and gain low-privileged access on the affected device.

Affected Platforms

Pepperl-Fuchs Icdm-Rx\/Pn1-Db9\/Rj45-DinPepperl-Fuchs Icdm-Rx\/En-4Db9\/2Rj45-DinPepperl-Fuchs Icdm-Rx\/Pn1-Db9\/Rj45-PmPepperl-Fuchs Icdm-Rx\/Tcp-16Rj45\/2Rj45-PmPepperl-Fuchs Icdm-Rx\/En-2Db9\/Rj45-DinPepperl-Fuchs Icdm-Rx\/En1-2Db9\/Rj45-DinPepperl-Fuchs Icdm-Rx\/Tcp Socketserver FirmwarePepperl-Fuchs Icdm-Rx\/En-Db9\/Rj45-DinPepperl-Fuchs Icdm-Rx\/Pn-Db9\/Rj45-PmPepperl-Fuchs Icdm-Rx\/Pn-St\/Rj45-Din

Weakness Type

CWE-79

References