Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%

Pepperl+Fuchs — Vulnerabilities & Security Advisories 33

Browse all 33 CVE security advisories affecting Pepperl+Fuchs. AI-powered Chinese analysis, POCs, and references for each vulnerability.

Pepperl+Fuchs specializes in industrial automation and sensor technology, serving manufacturing and process control industries. Historically, their products have faced vulnerabilities including remote code execution, cross-site scripting, and privilege escalation, often stemming from web interfaces and communication protocols. The company has addressed security flaws in their network components and industrial control systems, with 13 CVEs documented to date. While no major public security incidents have been widely reported, their exposure to common OT vulnerabilities reflects broader industry challenges in securing connected industrial equipment. Their security posture has evolved to include more robust authentication and encryption measures to mitigate risks in increasingly connected industrial environments.

CVE ID Title CVSS Severity Published
CVE-2026-27565 Remote code execution via uploading a malicious IODD file — ICE2-8IOL1-G65L-V1D CWE-78 9.8 Critical 2026-09-16
CVE-2026-27564 Command Injection via PUT in /api/datastorage/data — ICE2-8IOL1-G65L-V1D CWE-78 7.2 High 2026-09-16
CVE-2026-27563 Command Injection via GET in /api/datastorage/data — ICE2-8IOL1-G65L-V1D CWE-78 7.2 High 2026-09-16
CVE-2026-27562 Command Injection via PUT in /api/iodd/config — ICE2-8IOL1-G65L-V1D CWE-78 7.2 High 2026-09-16
CVE-2026-27561 Command Injection via GET in /api/iodd/config — ICE2-8IOL1-G65L-V1D CWE-78 7.2 High 2026-09-16
CVE-2026-27560 Command Injection via DELETE in /api/status/data — ICE2-8IOL1-G65L-V1D CWE-78 7.2 High 2026-09-16
CVE-2026-27559 Command Injection via GET in /api/status/data — ICE2-8IOL1-G65L-V1D CWE-78 8.8 High 2026-09-16
CVE-2026-27558 Command Injection in /index.php/attached_devices_tab/ajax_remove_uploaded_iodd_files — ICE2-8IOL1-G65L-V1D CWE-78 8.8 High 2026-09-16
CVE-2026-27557 Path Traversal in /index.php/view_uploaded_iodd_file — ICE2-8IOL1-G65L-V1D CWE-35 7.5 High 2026-09-16
CVE-2026-27556 Local File Inclusion in /index.php/ajax/save_iodd_parameters — ICE2-8IOL1-G65L-V1D CWE-98 8.8 High 2026-09-16
CVE-2026-27555 Local File Inclusion in /index.php/ajax/get_iodd_port_info — ICE2-8IOL1-G65L-V1D CWE-98 8.8 High 2026-09-16
CVE-2026-27554 Command Injection in /index.php/ajax/save_iodd_parameters — ICE2-8IOL1-G65L-V1D CWE-78 8.8 High 2026-09-16
CVE-2026-27553 Information Disclosure via Schema Path Manipulation — ICE2-8IOL1-G65L-V1D CWE-497 6.5 Medium 2026-09-16
CVE-2026-27552 Unauthorized IODD File Upload due to Improper Authorization — ICE2-8IOL1-G65L-V1D CWE-863 8.1 High 2026-09-16
CVE-2026-27551 Command Injection in /index.php/ajax/parameterManage — ICE2-8IOL1-G65L-V1D CWE-78 8.8 High 2026-09-16
CVE-2026-27550 Command Injection in Field_Shadow_Password Class — ICE2-8IOL1-G65L-V1D CWE-78 8.8 High 2026-09-16
CVE-2026-27549 Command Injection in /index.php/attached_devices_tab/do_upload — ICE2-8IOL1-G65L-V1D CWE-78 8.8 High 2026-09-16
CVE-2026-27548 Command Injection in /index.php/ajax/get_iodd_port_info — ICE2-8IOL1-G65L-V1D CWE-78 8.8 High 2026-09-16
CVE-2026-27547 Command Injection in /index.php/ajax/get_iodd_menu_info — ICE2-8IOL1-G65L-V1D CWE-78 8.8 High 2026-09-16
CVE-2026-27546 Authentication Bypass in _account_log — ICE2-8IOL1-G65L-V1D CWE-288 9.8 Critical 2026-09-16
CVE-2025-41655 PEPPERL+FUCHS: Attacker can cause a DoS via URL — Profinet Gateway FB8122A.1.EL CWE-306 7.5 High 2025-05-26
CVE-2025-41654 PEPPERL+FUCHS: Profinet Gateway LB8122A.1.EL – Device is affected by information disclosure via the SNMP protocol — Profinet Gateway FB8122A.1.EL CWE-306 8.2 High 2025-05-26
CVE-2025-1985 PEPPERL+FUCHS: Profinet Gateway LB8122A.1.EL – Device is affected by XSS vulnerability — Profinet Gateway FB8122A.1.EL CWE-79 6.1 Medium 2025-05-26
CVE-2024-38502 Pepperl+Fuchs: Device Master ICDM-RX/* XSS vulnerability allows stored XSS — ICDM-RX/TCP-DB9/RJ45-DIN CWE-79 7.1 High 2024-08-13
CVE-2024-38501 Pepperl+Fuchs: Device Master ICDM-RX/* XSS vulnerability allows HTML injection — ICDM-RX/TCP-DB9/RJ45-DIN CWE-79 6.1 Medium 2024-08-13
CVE-2024-5849 Pepperl+Fuchs: Device Master ICDM-RX/* XSS vulnerability allows reflected XSS — ICDM-RX/TCP-DB9/RJ45-DIN CWE-79 7.1 High 2024-08-13
CVE-2024-6422 Pepperl+Fuchs: OIT Products can be manipulated via unintended Telnet access — OIT1500-F113-B12-CB CWE-306 9.8 Critical 2024-07-10
CVE-2024-6421 Pepperl+Fuchs: Incorrectly configured FTP-Server in OIT Products — OIT1500-F113-B12-CB CWE-552 7.5 High 2024-07-10
CVE-2020-12504 Pepperl+Fuchs improper authorization affects multiple Comtrol RocketLinx products — P+F Comtrol RocketLinx CWE-912 9.8 Critical 2020-10-15
CVE-2020-12503 Pepperl+Fuchs improper authorization affects multiple Comtrol RocketLinx products — P+F Comtrol RocketLinx CWE-863 7.2 High 2020-10-15

This page lists every published CVE security advisory associated with Pepperl+Fuchs. Each entry links to a detailed page with CVSS scoring, CWE classification, affected products and references. AI-generated Chinese analysis is provided for fast triage.