Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1336 CNY

100%
Buy Us a Coffee

ICE2-8IOL1-G65L-V1D — Vulnerabilities & Security Advisories 20

All 20 CVE vulnerabilities found in ICE2-8IOL1-G65L-V1D, with AI-generated Chinese analysis, references, and POCs.

Vendor: Pepperl+Fuchs

CVE ID Title CVSS Severity Published
CVE-2026-27565 Remote code execution via uploading a malicious IODD file CWE-78 9.8 Critical 2026-09-16
CVE-2026-27564 Command Injection via PUT in /api/datastorage/data CWE-78 7.2 High 2026-09-16
CVE-2026-27563 Command Injection via GET in /api/datastorage/data CWE-78 7.2 High 2026-09-16
CVE-2026-27562 Command Injection via PUT in /api/iodd/config CWE-78 7.2 High 2026-09-16
CVE-2026-27561 Command Injection via GET in /api/iodd/config CWE-78 7.2 High 2026-09-16
CVE-2026-27560 Command Injection via DELETE in /api/status/data CWE-78 7.2 High 2026-09-16
CVE-2026-27559 Command Injection via GET in /api/status/data CWE-78 8.8 High 2026-09-16
CVE-2026-27558 Command Injection in /index.php/attached_devices_tab/ajax_remove_uploaded_iodd_files CWE-78 8.8 High 2026-09-16
CVE-2026-27557 Path Traversal in /index.php/view_uploaded_iodd_file CWE-35 7.5 High 2026-09-16
CVE-2026-27556 Local File Inclusion in /index.php/ajax/save_iodd_parameters CWE-98 8.8 High 2026-09-16
CVE-2026-27555 Local File Inclusion in /index.php/ajax/get_iodd_port_info CWE-98 8.8 High 2026-09-16
CVE-2026-27554 Command Injection in /index.php/ajax/save_iodd_parameters CWE-78 8.8 High 2026-09-16
CVE-2026-27553 Information Disclosure via Schema Path Manipulation CWE-497 6.5 Medium 2026-09-16
CVE-2026-27552 Unauthorized IODD File Upload due to Improper Authorization CWE-863 8.1 High 2026-09-16
CVE-2026-27551 Command Injection in /index.php/ajax/parameterManage CWE-78 8.8 High 2026-09-16
CVE-2026-27550 Command Injection in Field_Shadow_Password Class CWE-78 8.8 High 2026-09-16
CVE-2026-27549 Command Injection in /index.php/attached_devices_tab/do_upload CWE-78 8.8 High 2026-09-16
CVE-2026-27548 Command Injection in /index.php/ajax/get_iodd_port_info CWE-78 8.8 High 2026-09-16
CVE-2026-27547 Command Injection in /index.php/ajax/get_iodd_menu_info CWE-78 8.8 High 2026-09-16
CVE-2026-27546 Authentication Bypass in _account_log CWE-288 9.8 Critical 2026-09-16

All 20 known CVE vulnerabilities affecting ICE2-8IOL1-G65L-V1D with full Chinese analysis, references, and POCs where available.