Pepperl+Fuchs: Device Master ICDM-RX/* XSS vulnerability allows stored XSS
Priority LOW 31CWE-79Published · Updated
Key facts
- Attack vector
- Network
- Privileges required
- None
- User interaction
- Required
- Attack complexity
- Low
- Impact type
- Cross-site scripting
- Confidentiality · integrity · availability
- Low · Low · Low
- Fix status
- No fix listed
Attack profile from CVSS 3.1 · CNA. Fix status from CNA. Impact type from CWE-79.
Summary
An unauthenticated remote attacker may use stored XSS vulnerability to obtain information from a user or reboot the affected device once.
Why it matters now
Exploitation None reported CISA SSVC · not in CISA KEV
EPSS 0.00337 27th percentileScored 2026-11-07
Fix No fix listed No fixed version in the sources yet
SSVC decision points
CISA ADP · SSVC 2.0.3
- Exploitation
- None
- Automatable
- No
- Technical impact
- Partial
The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.
Affected products
| Vendor | Product | Affected versions | Fixed in | Status | Source |
|---|---|---|---|---|---|
| Pepperl+Fuchs | ICDM-RX/TCP-DB9/RJ45-DIN | SocketServer – 11.65 | — | No fix listed | CNA |
| Pepperl+Fuchs | ICDM-RX/TCP-ST/RJ45-DIN | SocketServer – 11.65 | — | No fix listed | CNA |
| Pepperl+Fuchs | ICDM-RX/TCP-4DB9/2RJ45-DIN | SocketServer – 11.65 | — | No fix listed | CNA |
| Pepperl+Fuchs | ICDM-RX/TCP-DB9/RJ45-PM | SocketServer – 11.65 | — | No fix listed | CNA |
| Pepperl+Fuchs | ICDM-RX/TCP-2DB9/RJ45-DIN | SocketServer – 11.65 | — | No fix listed | CNA |
| Pepperl+Fuchs | ICDM-RX/TCP-2ST/RJ45-DIN | SocketServer – 11.65 | — | No fix listed | CNA |
| Pepperl+Fuchs | ICDM-RX/TCP-4DB9/2RJ45-PM | SocketServer – 11.65 | — | No fix listed | CNA |
| Pepperl+Fuchs | ICDM-RX/TCP-8DB9/2RJ45-PM | SocketServer – 11.65 | — | No fix listed | CNA |
| Pepperl+Fuchs | ICDM-RX/TCP-16RJ45/RJ45-RM | SocketServer – 11.65 | — | No fix listed | CNA |
| Pepperl+Fuchs | ICDM-RX/TCP-16DB9/RJ45-RM | SocketServer – 11.65 | — | No fix listed | CNA |
| Pepperl+Fuchs | ICDM-RX/TCP-32RJ45/RJ45-RM | SocketServer – 11.65 | — | No fix listed | CNA |
| Pepperl+Fuchs | ICDM-RX/TCP-DB9/RJ45-PM2 | SocketServer – 11.65 | — | No fix listed | CNA |
| Pepperl+Fuchs | ICDM-RX/TCP-16RJ45/2RJ45-PM | SocketServer – 11.65 | — | No fix listed | CNA |
| Pepperl+Fuchs | ICDM-RX/PN-DB9/RJ45-DIN | PROFINET – v3.4.9 | — | No fix listed | CNA |
| Pepperl+Fuchs | ICDM-RX/PN-ST/RJ45-DIN | PROFINET – v3.4.9 | — | No fix listed | CNA |
| Pepperl+Fuchs | ICDM-RX/PN-4DB9/2RJ45-DIN | PROFINET – v3.4.9 | — | No fix listed | CNA |
| Pepperl+Fuchs | ICDM-RX/PN-DB9/RJ45-PM | PROFINET – v3.4.9 | — | No fix listed | CNA |
| Pepperl+Fuchs | ICDM-RX/PN-2DB9/RJ45-DIN | PROFINET – v3.4.9 | — | No fix listed | CNA |
| Pepperl+Fuchs | ICDM-RX/PN-2ST/RJ45-DIN | PROFINET – v3.4.9 | — | No fix listed | CNA |
| Pepperl+Fuchs | ICDM-RX/PN1-DB9/RJ45-PM | PROFINET/Modbus – v1.0.7 | — | No fix listed | CNA |
| Pepperl+Fuchs | ICDM-RX/PN1-DB9/RJ45-DIN | PROFINET/Modbus – v1.0.7 | — | No fix listed | CNA |
| Pepperl+Fuchs | ICDM-RX/PN1-ST/RJ45-DIN | PROFINET/Modbus – v1.0.7 | — | No fix listed | CNA |
| Pepperl+Fuchs | ICDM-RX/PN1-2DB9/RJ45-DIN | PROFINET/Modbus – v1.0.7 | — | No fix listed | CNA |
| Pepperl+Fuchs | ICDM-RX/PN1-4DB9/2RJ45-DIN | PROFINET/Modbus – v1.0.7 | — | No fix listed | CNA |
| Pepperl+Fuchs | ICDM-RX/PN1-2ST/RJ45-DIN | PROFINET/Modbus – v1.0.7 | — | No fix listed | CNA |
| Pepperl+Fuchs | ICDM-RX/EN-DB9/RJ45-DIN | EtherNet/IP – v7.22 | — | No fix listed | CNA |
| Pepperl+Fuchs | ICDM-RX/EN-ST/RJ45-DIN | EtherNet/IP – v7.22 | — | No fix listed | CNA |
| Pepperl+Fuchs | ICDM-RX/EN-4DB9/2RJ45-DIN | EtherNet/IP – v7.22 | — | No fix listed | CNA |
| Pepperl+Fuchs | ICDM-RX/EN-DB9/RJ45-PM | EtherNet/IP – v7.22 | — | No fix listed | CNA |
| Pepperl+Fuchs | ICDM-RX/EN-2DB9/RJ45-DIN | EtherNet/IP – v7.22 | — | No fix listed | CNA |
| Pepperl+Fuchs | ICDM-RX/EN-2ST/RJ45-DIN | EtherNet/IP – v7.22 | — | No fix listed | CNA |
| Pepperl+Fuchs | ICDM-RX/EN1-DB9/RJ45-PM | EIP/Modbus – v1.08 | — | No fix listed | CNA |
| Pepperl+Fuchs | ICDM-RX/EN1-DB9/RJ45-DIN | EIP/Modbus – v1.08 | — | No fix listed | CNA |
| Pepperl+Fuchs | ICDM-RX/EN1-ST/RJ45-DIN | EIP/Modbus – v1.08 | — | No fix listed | CNA |
| Pepperl+Fuchs | ICDM-RX/EN1-2DB9/RJ45-DIN | EIP/Modbus – v1.08 | — | No fix listed | CNA |
| Pepperl+Fuchs | ICDM-RX/EN1-4DB9/2RJ45-DIN | EIP/Modbus – v1.08 | — | No fix listed | CNA |
| Pepperl+Fuchs | ICDM-RX/EN1-2ST/RJ45-DIN | EIP/Modbus – v1.08 | — | No fix listed | CNA |
| Pepperl+Fuchs | ICDM-RX/MOD-DB9/RJ45-DIN | Modbus Router – v7.09; Modbus Server – v7.11; Modbus TCP – v7.11 | — | No fix listed | CNA |
| Pepperl+Fuchs | ICDM-RX/MOD-ST/RJ45-DIN | Modbus Router – v7.09; Modbus Server – v7.11; Modbus TCP – v7.11 | — | No fix listed | CNA |
| Pepperl+Fuchs | ICDM-RX/MOD-4DB9/2RJ45-DIN | Modbus Router – v7.09; Modbus Server – v7.11; Modbus TCP – v7.11 | — | No fix listed | CNA |
| Pepperl+Fuchs | ICDM-RX/MOD-DB9/RJ45-PM | Modbus Router – v7.09; Modbus Server – v7.11; Modbus TCP – v7.11 | — | No fix listed | CNA |
| Pepperl+Fuchs | ICDM-RX/MOD-2DB9/RJ45-DIN | Modbus Router – v7.09; Modbus Server – v7.11; Modbus TCP – v7.11 | — | No fix listed | CNA |
| Pepperl+Fuchs | ICDM-RX/MOD-2ST/RJ45-DIN | Modbus Router – v7.09; Modbus Server – v7.11; Modbus TCP – v7.11 | — | No fix listed | CNA |
| Pepperl+Fuchs | ICDM-RX/MOD-16RJ45/2RJ45-PM | Modbus Router – v7.09; Modbus Server – v7.11; Modbus TCP – v7.11 | — | No fix listed | CNA |
- ICDM-RX/TCP-DB9/RJ45-DIN VendorPepperl+Fuchs Affected SocketServer – 11.65 Fixed in — No fix listed CNA
- ICDM-RX/TCP-ST/RJ45-DIN VendorPepperl+Fuchs Affected SocketServer – 11.65 Fixed in — No fix listed CNA
- ICDM-RX/TCP-4DB9/2RJ45-DIN VendorPepperl+Fuchs Affected SocketServer – 11.65 Fixed in — No fix listed CNA
- ICDM-RX/TCP-DB9/RJ45-PM VendorPepperl+Fuchs Affected SocketServer – 11.65 Fixed in — No fix listed CNA
- ICDM-RX/TCP-2DB9/RJ45-DIN VendorPepperl+Fuchs Affected SocketServer – 11.65 Fixed in — No fix listed CNA
- ICDM-RX/TCP-2ST/RJ45-DIN VendorPepperl+Fuchs Affected SocketServer – 11.65 Fixed in — No fix listed CNA
- ICDM-RX/TCP-4DB9/2RJ45-PM VendorPepperl+Fuchs Affected SocketServer – 11.65 Fixed in — No fix listed CNA
- ICDM-RX/TCP-8DB9/2RJ45-PM VendorPepperl+Fuchs Affected SocketServer – 11.65 Fixed in — No fix listed CNA
- ICDM-RX/TCP-16RJ45/RJ45-RM VendorPepperl+Fuchs Affected SocketServer – 11.65 Fixed in — No fix listed CNA
- ICDM-RX/TCP-16DB9/RJ45-RM VendorPepperl+Fuchs Affected SocketServer – 11.65 Fixed in — No fix listed CNA
- ICDM-RX/TCP-32RJ45/RJ45-RM VendorPepperl+Fuchs Affected SocketServer – 11.65 Fixed in — No fix listed CNA
- ICDM-RX/TCP-DB9/RJ45-PM2 VendorPepperl+Fuchs Affected SocketServer – 11.65 Fixed in — No fix listed CNA
- ICDM-RX/TCP-16RJ45/2RJ45-PM VendorPepperl+Fuchs Affected SocketServer – 11.65 Fixed in — No fix listed CNA
- ICDM-RX/PN-DB9/RJ45-DIN VendorPepperl+Fuchs Affected PROFINET – v3.4.9 Fixed in — No fix listed CNA
- ICDM-RX/PN-ST/RJ45-DIN VendorPepperl+Fuchs Affected PROFINET – v3.4.9 Fixed in — No fix listed CNA
- ICDM-RX/PN-4DB9/2RJ45-DIN VendorPepperl+Fuchs Affected PROFINET – v3.4.9 Fixed in — No fix listed CNA
- ICDM-RX/PN-DB9/RJ45-PM VendorPepperl+Fuchs Affected PROFINET – v3.4.9 Fixed in — No fix listed CNA
- ICDM-RX/PN-2DB9/RJ45-DIN VendorPepperl+Fuchs Affected PROFINET – v3.4.9 Fixed in — No fix listed CNA
- ICDM-RX/PN-2ST/RJ45-DIN VendorPepperl+Fuchs Affected PROFINET – v3.4.9 Fixed in — No fix listed CNA
- ICDM-RX/PN1-DB9/RJ45-PM VendorPepperl+Fuchs Affected PROFINET/Modbus – v1.0.7 Fixed in — No fix listed CNA
- ICDM-RX/PN1-DB9/RJ45-DIN VendorPepperl+Fuchs Affected PROFINET/Modbus – v1.0.7 Fixed in — No fix listed CNA
- ICDM-RX/PN1-ST/RJ45-DIN VendorPepperl+Fuchs Affected PROFINET/Modbus – v1.0.7 Fixed in — No fix listed CNA
- ICDM-RX/PN1-2DB9/RJ45-DIN VendorPepperl+Fuchs Affected PROFINET/Modbus – v1.0.7 Fixed in — No fix listed CNA
- ICDM-RX/PN1-4DB9/2RJ45-DIN VendorPepperl+Fuchs Affected PROFINET/Modbus – v1.0.7 Fixed in — No fix listed CNA
- ICDM-RX/PN1-2ST/RJ45-DIN VendorPepperl+Fuchs Affected PROFINET/Modbus – v1.0.7 Fixed in — No fix listed CNA
- ICDM-RX/EN-DB9/RJ45-DIN VendorPepperl+Fuchs Affected EtherNet/IP – v7.22 Fixed in — No fix listed CNA
- ICDM-RX/EN-ST/RJ45-DIN VendorPepperl+Fuchs Affected EtherNet/IP – v7.22 Fixed in — No fix listed CNA
- ICDM-RX/EN-4DB9/2RJ45-DIN VendorPepperl+Fuchs Affected EtherNet/IP – v7.22 Fixed in — No fix listed CNA
- ICDM-RX/EN-DB9/RJ45-PM VendorPepperl+Fuchs Affected EtherNet/IP – v7.22 Fixed in — No fix listed CNA
- ICDM-RX/EN-2DB9/RJ45-DIN VendorPepperl+Fuchs Affected EtherNet/IP – v7.22 Fixed in — No fix listed CNA
- ICDM-RX/EN-2ST/RJ45-DIN VendorPepperl+Fuchs Affected EtherNet/IP – v7.22 Fixed in — No fix listed CNA
- ICDM-RX/EN1-DB9/RJ45-PM VendorPepperl+Fuchs Affected EIP/Modbus – v1.08 Fixed in — No fix listed CNA
- ICDM-RX/EN1-DB9/RJ45-DIN VendorPepperl+Fuchs Affected EIP/Modbus – v1.08 Fixed in — No fix listed CNA
- ICDM-RX/EN1-ST/RJ45-DIN VendorPepperl+Fuchs Affected EIP/Modbus – v1.08 Fixed in — No fix listed CNA
- ICDM-RX/EN1-2DB9/RJ45-DIN VendorPepperl+Fuchs Affected EIP/Modbus – v1.08 Fixed in — No fix listed CNA
- ICDM-RX/EN1-4DB9/2RJ45-DIN VendorPepperl+Fuchs Affected EIP/Modbus – v1.08 Fixed in — No fix listed CNA
- ICDM-RX/EN1-2ST/RJ45-DIN VendorPepperl+Fuchs Affected EIP/Modbus – v1.08 Fixed in — No fix listed CNA
- ICDM-RX/MOD-DB9/RJ45-DIN VendorPepperl+Fuchs Affected Modbus Router – v7.09; Modbus Server – v7.11; Modbus TCP – v7.11 Fixed in — No fix listed CNA
- ICDM-RX/MOD-ST/RJ45-DIN VendorPepperl+Fuchs Affected Modbus Router – v7.09; Modbus Server – v7.11; Modbus TCP – v7.11 Fixed in — No fix listed CNA
- ICDM-RX/MOD-4DB9/2RJ45-DIN VendorPepperl+Fuchs Affected Modbus Router – v7.09; Modbus Server – v7.11; Modbus TCP – v7.11 Fixed in — No fix listed CNA
- ICDM-RX/MOD-DB9/RJ45-PM VendorPepperl+Fuchs Affected Modbus Router – v7.09; Modbus Server – v7.11; Modbus TCP – v7.11 Fixed in — No fix listed CNA
- ICDM-RX/MOD-2DB9/RJ45-DIN VendorPepperl+Fuchs Affected Modbus Router – v7.09; Modbus Server – v7.11; Modbus TCP – v7.11 Fixed in — No fix listed CNA
- ICDM-RX/MOD-2ST/RJ45-DIN VendorPepperl+Fuchs Affected Modbus Router – v7.09; Modbus Server – v7.11; Modbus TCP – v7.11 Fixed in — No fix listed CNA
- ICDM-RX/MOD-16RJ45/2RJ45-PM VendorPepperl+Fuchs Affected Modbus Router – v7.09; Modbus Server – v7.11; Modbus TCP – v7.11 Fixed in — No fix listed CNA
CPE configurations NVD · 48
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:o:pepperl-fuchs:icdm-rx\/tcp_socketserver_firmware:*:*:*:*:*:*:*:* | before 11.65 | Vulnerable | Pepperl+Fuchs |
| cpe:2.3:h:pepperl-fuchs:icdm-rx\/tcp-16db9\/rj45-rm:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Pepperl+Fuchs |
| cpe:2.3:h:pepperl-fuchs:icdm-rx\/tcp-16rj45\/2rj45-pm:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Pepperl+Fuchs |
| cpe:2.3:h:pepperl-fuchs:icdm-rx\/tcp-16rj45\/rj45-rm:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Pepperl+Fuchs |
| cpe:2.3:h:pepperl-fuchs:icdm-rx\/tcp-2db9\/rj45-din:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Pepperl+Fuchs |
| cpe:2.3:h:pepperl-fuchs:icdm-rx\/tcp-2st\/rj45-din:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Pepperl+Fuchs |
| cpe:2.3:h:pepperl-fuchs:icdm-rx\/tcp-32rj45\/rj45-rm:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Pepperl+Fuchs |
| cpe:2.3:h:pepperl-fuchs:icdm-rx\/tcp-4db9\/2rj45-din:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Pepperl+Fuchs |
| cpe:2.3:h:pepperl-fuchs:icdm-rx\/tcp-4db9\/2rj45-pm:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Pepperl+Fuchs |
| cpe:2.3:h:pepperl-fuchs:icdm-rx\/tcp-8db9\/2rj45-pm:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Pepperl+Fuchs |
- cpe:2.3:o:pepperl-fuchs:icdm-rx\/tcp_socketserver_firmware:*:*:*:*:*:*:*:* Versions before 11.65 Vulnerable ·Pepperl+Fuchs
- cpe:2.3:h:pepperl-fuchs:icdm-rx\/tcp-16db9\/rj45-rm:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Pepperl+Fuchs
- cpe:2.3:h:pepperl-fuchs:icdm-rx\/tcp-16rj45\/2rj45-pm:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Pepperl+Fuchs
- cpe:2.3:h:pepperl-fuchs:icdm-rx\/tcp-16rj45\/rj45-rm:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Pepperl+Fuchs
- cpe:2.3:h:pepperl-fuchs:icdm-rx\/tcp-2db9\/rj45-din:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Pepperl+Fuchs
- cpe:2.3:h:pepperl-fuchs:icdm-rx\/tcp-2st\/rj45-din:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Pepperl+Fuchs
- cpe:2.3:h:pepperl-fuchs:icdm-rx\/tcp-32rj45\/rj45-rm:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Pepperl+Fuchs
- cpe:2.3:h:pepperl-fuchs:icdm-rx\/tcp-4db9\/2rj45-din:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Pepperl+Fuchs
- cpe:2.3:h:pepperl-fuchs:icdm-rx\/tcp-4db9\/2rj45-pm:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Pepperl+Fuchs
- cpe:2.3:h:pepperl-fuchs:icdm-rx\/tcp-8db9\/2rj45-pm:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Pepperl+Fuchs
Show 38 more CPE
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:h:pepperl-fuchs:icdm-rx\/tcp-db9\/rj45-din:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Pepperl+Fuchs |
| cpe:2.3:h:pepperl-fuchs:icdm-rx\/tcp-db9\/rj45-pm:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Pepperl+Fuchs |
| cpe:2.3:h:pepperl-fuchs:icdm-rx\/tcp-db9\/rj45-pm2:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Pepperl+Fuchs |
| cpe:2.3:h:pepperl-fuchs:icdm-rx\/tcp-st\/rj45-din:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Pepperl+Fuchs |
| cpe:2.3:o:pepperl-fuchs:profinet_firmware:*:*:*:*:*:*:*:* | before 3.4.9 | Vulnerable | Pepperl+Fuchs |
| cpe:2.3:h:pepperl-fuchs:icdm-rx\/pn-2db9\/rj45-din:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Pepperl+Fuchs |
| cpe:2.3:h:pepperl-fuchs:icdm-rx\/pn-2st\/rj45-din:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Pepperl+Fuchs |
| cpe:2.3:h:pepperl-fuchs:icdm-rx\/pn-4db9\/2rj45-din:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Pepperl+Fuchs |
| cpe:2.3:h:pepperl-fuchs:icdm-rx\/pn-db9\/rj45-din:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Pepperl+Fuchs |
| cpe:2.3:h:pepperl-fuchs:icdm-rx\/pn-db9\/rj45-pm:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Pepperl+Fuchs |
| cpe:2.3:h:pepperl-fuchs:icdm-rx\/pn-st\/rj45-din:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Pepperl+Fuchs |
| cpe:2.3:o:pepperl-fuchs:profinet\/modbus_firmware:*:*:*:*:*:*:*:* | before 1.0.7 | Vulnerable | Pepperl+Fuchs |
| cpe:2.3:h:pepperl-fuchs:icdm-rx\/pn1-2db9\/rj45-din:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Pepperl+Fuchs |
| cpe:2.3:h:pepperl-fuchs:icdm-rx\/pn1-2st\/rj45-din:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Pepperl+Fuchs |
| cpe:2.3:h:pepperl-fuchs:icdm-rx\/pn1-4db9\/2rj45-din:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Pepperl+Fuchs |
| cpe:2.3:h:pepperl-fuchs:icdm-rx\/pn1-db9\/rj45-din:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Pepperl+Fuchs |
| cpe:2.3:h:pepperl-fuchs:icdm-rx\/pn1-db9\/rj45-pm:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Pepperl+Fuchs |
| cpe:2.3:h:pepperl-fuchs:icdm-rx\/pn1-st\/rj45-din:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Pepperl+Fuchs |
| cpe:2.3:o:pepperl-fuchs:modbus_router_firmware:*:*:*:*:*:*:*:* | before 7.09 | Vulnerable | Pepperl+Fuchs |
| cpe:2.3:o:pepperl-fuchs:modbus_server_firmware:*:*:*:*:*:*:*:* | before 7.11 | Vulnerable | Pepperl+Fuchs |
| cpe:2.3:o:pepperl-fuchs:modbus_tcp_firmware:*:*:*:*:*:*:*:* | before 7.11 | Vulnerable | Pepperl+Fuchs |
| cpe:2.3:h:pepperl-fuchs:icdm-rx\/mod-4db9\/2rj45-din:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Pepperl+Fuchs |
| cpe:2.3:h:pepperl-fuchs:icdm-rx\/mod-db9\/rj45-din:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Pepperl+Fuchs |
| cpe:2.3:h:pepperl-fuchs:icdm-rx\/mod-st\/rj45-din:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Pepperl+Fuchs |
| cpe:2.3:o:pepperl-fuchs:ethernet\/ip_firmware:*:*:*:*:*:*:*:* | before 7.22 | Vulnerable | Pepperl+Fuchs |
| cpe:2.3:h:pepperl-fuchs:icdm-rx\/en-2db9\/rj45-din:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Pepperl+Fuchs |
| cpe:2.3:h:pepperl-fuchs:icdm-rx\/en-2st\/rj45-din:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Pepperl+Fuchs |
| cpe:2.3:h:pepperl-fuchs:icdm-rx\/en-4db9\/2rj45-din:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Pepperl+Fuchs |
| cpe:2.3:h:pepperl-fuchs:icdm-rx\/en-db9\/rj45-din:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Pepperl+Fuchs |
| cpe:2.3:h:pepperl-fuchs:icdm-rx\/en-db9\/rj45-pm:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Pepperl+Fuchs |
| cpe:2.3:h:pepperl-fuchs:icdm-rx\/en-st\/rj45-din:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Pepperl+Fuchs |
| cpe:2.3:o:pepperl-fuchs:eip\/modbus_firmware:*:*:*:*:*:*:*:* | before 1.08 | Vulnerable | Pepperl+Fuchs |
| cpe:2.3:h:pepperl-fuchs:icdm-rx\/en1-2db9\/rj45-din:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Pepperl+Fuchs |
| cpe:2.3:h:pepperl-fuchs:icdm-rx\/en1-2st\/rj45-din:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Pepperl+Fuchs |
| cpe:2.3:h:pepperl-fuchs:icdm-rx\/en1-4db9\/2rj45-din:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Pepperl+Fuchs |
| cpe:2.3:h:pepperl-fuchs:icdm-rx\/en1-db9\/rj45-din:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Pepperl+Fuchs |
| cpe:2.3:h:pepperl-fuchs:icdm-rx\/en1-db9\/rj45-pm:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Pepperl+Fuchs |
| cpe:2.3:h:pepperl-fuchs:icdm-rx\/en1-st\/rj45-din:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Pepperl+Fuchs |
- cpe:2.3:h:pepperl-fuchs:icdm-rx\/tcp-db9\/rj45-din:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Pepperl+Fuchs
- cpe:2.3:h:pepperl-fuchs:icdm-rx\/tcp-db9\/rj45-pm:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Pepperl+Fuchs
- cpe:2.3:h:pepperl-fuchs:icdm-rx\/tcp-db9\/rj45-pm2:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Pepperl+Fuchs
- cpe:2.3:h:pepperl-fuchs:icdm-rx\/tcp-st\/rj45-din:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Pepperl+Fuchs
- cpe:2.3:o:pepperl-fuchs:profinet_firmware:*:*:*:*:*:*:*:* Versions before 3.4.9 Vulnerable ·Pepperl+Fuchs
- cpe:2.3:h:pepperl-fuchs:icdm-rx\/pn-2db9\/rj45-din:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Pepperl+Fuchs
- cpe:2.3:h:pepperl-fuchs:icdm-rx\/pn-2st\/rj45-din:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Pepperl+Fuchs
- cpe:2.3:h:pepperl-fuchs:icdm-rx\/pn-4db9\/2rj45-din:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Pepperl+Fuchs
- cpe:2.3:h:pepperl-fuchs:icdm-rx\/pn-db9\/rj45-din:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Pepperl+Fuchs
- cpe:2.3:h:pepperl-fuchs:icdm-rx\/pn-db9\/rj45-pm:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Pepperl+Fuchs
- cpe:2.3:h:pepperl-fuchs:icdm-rx\/pn-st\/rj45-din:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Pepperl+Fuchs
- cpe:2.3:o:pepperl-fuchs:profinet\/modbus_firmware:*:*:*:*:*:*:*:* Versions before 1.0.7 Vulnerable ·Pepperl+Fuchs
- cpe:2.3:h:pepperl-fuchs:icdm-rx\/pn1-2db9\/rj45-din:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Pepperl+Fuchs
- cpe:2.3:h:pepperl-fuchs:icdm-rx\/pn1-2st\/rj45-din:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Pepperl+Fuchs
- cpe:2.3:h:pepperl-fuchs:icdm-rx\/pn1-4db9\/2rj45-din:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Pepperl+Fuchs
- cpe:2.3:h:pepperl-fuchs:icdm-rx\/pn1-db9\/rj45-din:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Pepperl+Fuchs
- cpe:2.3:h:pepperl-fuchs:icdm-rx\/pn1-db9\/rj45-pm:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Pepperl+Fuchs
- cpe:2.3:h:pepperl-fuchs:icdm-rx\/pn1-st\/rj45-din:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Pepperl+Fuchs
- cpe:2.3:o:pepperl-fuchs:modbus_router_firmware:*:*:*:*:*:*:*:* Versions before 7.09 Vulnerable ·Pepperl+Fuchs
- cpe:2.3:o:pepperl-fuchs:modbus_server_firmware:*:*:*:*:*:*:*:* Versions before 7.11 Vulnerable ·Pepperl+Fuchs
- cpe:2.3:o:pepperl-fuchs:modbus_tcp_firmware:*:*:*:*:*:*:*:* Versions before 7.11 Vulnerable ·Pepperl+Fuchs
- cpe:2.3:h:pepperl-fuchs:icdm-rx\/mod-4db9\/2rj45-din:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Pepperl+Fuchs
- cpe:2.3:h:pepperl-fuchs:icdm-rx\/mod-db9\/rj45-din:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Pepperl+Fuchs
- cpe:2.3:h:pepperl-fuchs:icdm-rx\/mod-st\/rj45-din:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Pepperl+Fuchs
- cpe:2.3:o:pepperl-fuchs:ethernet\/ip_firmware:*:*:*:*:*:*:*:* Versions before 7.22 Vulnerable ·Pepperl+Fuchs
- cpe:2.3:h:pepperl-fuchs:icdm-rx\/en-2db9\/rj45-din:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Pepperl+Fuchs
- cpe:2.3:h:pepperl-fuchs:icdm-rx\/en-2st\/rj45-din:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Pepperl+Fuchs
- cpe:2.3:h:pepperl-fuchs:icdm-rx\/en-4db9\/2rj45-din:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Pepperl+Fuchs
- cpe:2.3:h:pepperl-fuchs:icdm-rx\/en-db9\/rj45-din:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Pepperl+Fuchs
- cpe:2.3:h:pepperl-fuchs:icdm-rx\/en-db9\/rj45-pm:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Pepperl+Fuchs
- cpe:2.3:h:pepperl-fuchs:icdm-rx\/en-st\/rj45-din:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Pepperl+Fuchs
- cpe:2.3:o:pepperl-fuchs:eip\/modbus_firmware:*:*:*:*:*:*:*:* Versions before 1.08 Vulnerable ·Pepperl+Fuchs
- cpe:2.3:h:pepperl-fuchs:icdm-rx\/en1-2db9\/rj45-din:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Pepperl+Fuchs
- cpe:2.3:h:pepperl-fuchs:icdm-rx\/en1-2st\/rj45-din:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Pepperl+Fuchs
- cpe:2.3:h:pepperl-fuchs:icdm-rx\/en1-4db9\/2rj45-din:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Pepperl+Fuchs
- cpe:2.3:h:pepperl-fuchs:icdm-rx\/en1-db9\/rj45-din:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Pepperl+Fuchs
- cpe:2.3:h:pepperl-fuchs:icdm-rx\/en1-db9\/rj45-pm:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Pepperl+Fuchs
- cpe:2.3:h:pepperl-fuchs:icdm-rx\/en1-st\/rj45-din:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Pepperl+Fuchs
Remediation
No fixed version listed by the sources yet.
Timeline
- 2026-10-02 Threatist record created from CVE-2024-38502
- 2026-10-03 Alias added: GHSA-x43g-g62f-p4cw
References
More Pepperl+Fuchs Eip/modbus Firmware vulnerabilities
- TI-2024-05425 Pepperl+Fuchs: Device Master ICDM-RX/* XSS vulnerability allows reflected XSS CVSS 3.1HIGH 7.1
- TI-2024-25737 Pepperl+Fuchs: Device Master ICDM-RX/* XSS vulnerability allows HTML injection CVSS 3.1MEDIUM 6.1
Sources
- CVE-2024-38502 · CVE Program
- CVE-2024-38502 · NVD
- FIRST EPSS
- GHSA-x43g-g62f-p4cw · GitHub Advisory Database · CC BY 4.0
This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences