{"document":{"acknowledgments":[{"organization":"CERT@VDE","summary":"coordination","urls":["https://certvde.com"]},{"organization":"Christopher Di-Nozzi","summary":"reporting","urls":["https://ssen-transmission.co.uk"]}],"category":"csaf_security_advisory","csaf_version":"2.0","distribution":{"tlp":{"label":"WHITE","url":"https://www.first.org/tlp/"}},"lang":"en-GB","notes":[{"category":"summary","text":"Vulnerabilities have been discovered in the product, mainly caused by HTML injection and crosssite-scripting.  \nThe impact of the vulnerability on the affected device may result in an information disclosure and denial of service.","title":"Summary"},{"category":"description","text":"An unauthenticated remote attacker may use\n * a HTML injection vulnerability with limited length to inject malicious HTML code.\n * a reflected XSS vulnerability to obtain information from a user or reboot the device once.\n * stored XSS vulnerability to obtain information from a user or reboot the device once.","title":"Impact"},{"category":"description","text":"Update to a new version of the firmware you are using:\n * SocketServer v11.66\n * PROFINET v3.4.10\n * PROFINET/Modbus v1.0.8\n * EtherNet/IP v7.23\n * EIP/Modbus v1.09\n * Modbus Router v7.10\n * Modbus Server v7.12\n * Modbus TCP v7.12","title":"Remediation"}],"publisher":{"category":"vendor","contact_details":"cert@pepperl-fuchs.com","name":"Pepperl+Fuchs SE","namespace":"https://www.pepperl-fuchs.com"},"references":[{"category":"external","summary":"Pepperl+Fuchs PSIRT","url":"https://www.pepperl-fuchs.com/global/en/29079.htm"},{"category":"external","summary":"CERT@VDE Security Advisories for Pepperl+Fuchs","url":"https://certvde.com/en/advisories/vendor/Pepperl+Fuchs"},{"category":"self","summary":"VDE-2024-033: PEPPERL+FUCHS: Device Master ICDM-RX/* – Vulnerability may allow unauthenticated remote attacker information disclosure and denial of service - HTML","url":"https://certvde.com/en/advisories/VDE-2024-033/"},{"category":"self","summary":"VDE-2024-033: PEPPERL+FUCHS: Device Master ICDM-RX/* – Vulnerability may allow unauthenticated remote attacker information disclosure and denial of service - CSAF","url":"https://pepperl-fuchs.csaf-tp.certvde.com/.well-known/csaf/white/2024/vde-2024-033.json"}],"title":"PEPPERL+FUCHS: Device Master ICDM-RX/* – Vulnerability may allow unauthenticated remote attacker information disclosure and denial of service","tracking":{"aliases":["VDE-2024-033"],"current_release_date":"2025-05-14T14:34:17.000Z","generator":{"date":"2024-09-04T13:40:27.467Z","engine":{"name":"Secvisogram","version":"2.5.11"}},"id":"VDE-2024-033","initial_release_date":"2024-08-13T12:00:00.000Z","revision_history":[{"date":"2024-08-13T12:00:00.000Z","number":"1","summary":"Initial revision."},{"date":"2024-11-06T11:27:01.000Z","number":"2","summary":"Fix: correct certvde domain, added self-reference"},{"date":"2025-05-14T14:34:17.000Z","number":"3","summary":"Fix: version space"}],"status":"final","version":"3"}},"product_tree":{"branches":[{"branches":[{"branches":[{"branches":[{"category":"product_name","name":"ICDM-RX/EN1-2DB9/RJ45-DIN","product":{"name":"ICDM-RX/EN1-2DB9/RJ45-DIN","product_id":"CSAFPID-11001","product_identification_helper":{"model_numbers":["70114034"]}}},{"category":"product_name","name":"ICDM-RX/EN1-2ST/RJ45-DIN","product":{"name":"ICDM-RX/EN1-2ST/RJ45-DIN","product_id":"CSAFPID-11002","product_identification_helper":{"model_numbers":["70114036"]}}},{"category":"product_name","name":"ICDM-RX/EN1-4DB9/2RJ45-DIN","product":{"name":"ICDM-RX/EN1-4DB9/2RJ45-DIN","product_id":"CSAFPID-11003","product_identification_helper":{"model_numbers":["70114035"]}}},{"category":"product_name","name":"ICDM-RX/EN1-DB9/RJ45-DIN","product":{"name":"ICDM-RX/EN1-DB9/RJ45-DIN","product_id":"CSAFPID-11004","product_identification_helper":{"model_numbers":["70114032"]}}},{"category":"product_name","name":"ICDM-RX/EN1-DB9/RJ45-PM","product":{"name":"ICDM-RX/EN1-DB9/RJ45-PM","product_id":"CSAFPID-11005","product_identification_helper":{"model_numbers":["70114024"]}}},{"category":"product_name","name":"ICDM-RX/EN1-ST/RJ45-DIN","product":{"name":"ICDM-RX/EN1-ST/RJ45-DIN","product_id":"CSAFPID-11006","product_identification_helper":{"model_numbers":["70114033"]}}}],"category":"product_family","name":"RX/EN1 - EIP/Modbus"},{"branches":[{"category":"product_name","name":"ICDM-RX/EN-2DB9/RJ45-DIN","product":{"name":"ICDM-RX/EN-2DB9/RJ45-DIN","product_id":"CSAFPID-11101","product_identification_helper":{"model_numbers":["70114026"]}}},{"category":"product_name","name":"ICDM-RX/EN-2ST/RJ45-DIN","product":{"name":"ICDM-RX/EN-2ST/RJ45-DIN","product_id":"CSAFPID-11102","product_identification_helper":{"model_numbers":["70114027"]}}},{"category":"product_name","name":"ICDM-RX/EN-4DB9/2RJ45-DIN","product":{"name":"ICDM-RX/EN-4DB9/2RJ45-DIN","product_id":"CSAFPID-11103","product_identification_helper":{"model_numbers":["70104872"]}}},{"category":"product_name","name":"ICDM-RX/EN-DB9/RJ45-DIN","product":{"name":"ICDM-RX/EN-DB9/RJ45-DIN","product_id":"CSAFPID-11104","product_identification_helper":{"model_numbers":["70104870"]}}},{"category":"product_name","name":"ICDM-RX/EN-DB9/RJ45-PM","product":{"name":"ICDM-RX/EN-DB9/RJ45-PM","product_id":"CSAFPID-11105","product_identification_helper":{"model_numbers":["70114020"]}}},{"category":"product_name","name":"ICDM-RX/EN-ST/RJ45-DIN","product":{"name":"ICDM-RX/EN-ST/RJ45-DIN","product_id":"CSAFPID-11106","product_identification_helper":{"model_numbers":["70104871"]}}}],"category":"product_family","name":"RX/EN - EtherNet/IP"},{"branches":[{"category":"product_name","name":"ICDM-RX/MOD-4DB9/2RJ45-DIN","product":{"name":"ICDM-RX/MOD-4DB9/2RJ45-DIN","product_id":"CSAFPID-11201","product_identification_helper":{"model_numbers":["70104884"]}}},{"category":"product_name","name":"ICDM-RX/MOD-DB9/RJ45-DIN","product":{"name":"ICDM-RX/MOD-DB9/RJ45-DIN","product_id":"CSAFPID-11202","product_identification_helper":{"model_numbers":["70104882"]}}},{"category":"product_name","name":"ICDM-RX/MOD-ST/RJ45-DIN","product":{"name":"ICDM-RX/MOD-ST/RJ45-DIN","product_id":"CSAFPID-11203","product_identification_helper":{"model_numbers":["70104883"]}}}],"category":"product_family","name":"RX/MOD Modbus TCP/Server/Router"},{"branches":[{"category":"product_name","name":"ICDM-RX/PN1-2DB9/RJ45-DIN","product":{"name":"ICDM-RX/PN1-2DB9/RJ45-DIN","product_id":"CSAFPID-11501","product_identification_helper":{"model_numbers":["70114039"]}}},{"category":"product_name","name":"ICDM-RX/PN1-2ST/RJ45-DIN","product":{"name":"ICDM-RX/PN1-2ST/RJ45-DIN","product_id":"CSAFPID-11502","product_identification_helper":{"model_numbers":["70114042"]}}},{"category":"product_name","name":"ICDM-RX/PN1-4DB9/2RJ45-DIN","product":{"name":"ICDM-RX/PN1-4DB9/2RJ45-DIN","product_id":"CSAFPID-11503","product_identification_helper":{"model_numbers":["70114040"]}}},{"category":"product_name","name":"ICDM-RX/PN1-DB9/RJ45-DIN","product":{"name":"ICDM-RX/PN1-DB9/RJ45-DIN","product_id":"CSAFPID-11504","product_identification_helper":{"model_numbers":["70114037"]}}},{"category":"product_name","name":"ICDM-RX/PN1-DB9/RJ45-PM","product":{"name":"ICDM-RX/PN1-DB9/RJ45-PM","product_id":"CSAFPID-11505","product_identification_helper":{"model_numbers":["70114025"]}}},{"category":"product_name","name":"ICDM-RX/PN1-ST/RJ45-DIN","product":{"name":"ICDM-RX/PN1-ST/RJ45-DIN","product_id":"CSAFPID-11506","product_identification_helper":{"model_numbers":["70114038"]}}}],"category":"product_family","name":"RX/PN1 - PROFINET/Modbus"},{"branches":[{"category":"product_name","name":"ICDM-RX/PN-2DB9/RJ45-DIN","product":{"name":"ICDM-RX/PN-2DB9/RJ45-DIN","product_id":"CSAFPID-11601","product_identification_helper":{"model_numbers":["70114028"]}}},{"category":"product_name","name":"ICDM-RX/PN-2ST/RJ45-DIN","product":{"name":"ICDM-RX/PN-2ST/RJ45-DIN","product_id":"CSAFPID-11602","product_identification_helper":{"model_numbers":["70114029"]}}},{"category":"product_name","name":"ICDM-RX/PN-4DB9/2RJ45-DIN","product":{"name":"ICDM-RX/PN-4DB9/2RJ45-DIN","product_id":"CSAFPID-11603","product_identification_helper":{"model_numbers":["70104875"]}}},{"category":"product_name","name":"ICDM-RX/PN-DB9/RJ45-DIN","product":{"name":"ICDM-RX/PN-DB9/RJ45-DIN","product_id":"CSAFPID-11604","product_identification_helper":{"model_numbers":["70104873"]}}},{"category":"product_name","name":"ICDM-RX/PN-DB9/RJ45-PM","product":{"name":"ICDM-RX/PN-DB9/RJ45-PM","product_id":"CSAFPID-11605","product_identification_helper":{"model_numbers":["70114018"]}}},{"category":"product_name","name":"ICDM-RX/PN-ST/RJ45-DIN","product":{"name":"ICDM-RX/PN-ST/RJ45-DIN","product_id":"CSAFPID-11606","product_identification_helper":{"model_numbers":["70104874"]}}}],"category":"product_family","name":"RX/PN - PROFINET"},{"branches":[{"category":"product_name","name":"ICDM-RX/TCP-16DB9/RJ45-RM","product":{"name":"ICDM-RX/TCP-16DB9/RJ45-RM","product_id":"CSAFPID-11701","product_identification_helper":{"model_numbers":["70114049"]}}},{"category":"product_name","name":"ICDM-RX/TCP-16RJ45/2RJ45-PM","product":{"name":"ICDM-RX/TCP-16RJ45/2RJ45-PM","product_id":"CSAFPID-11702","product_identification_helper":{"model_numbers":["70139042"]}}},{"category":"product_name","name":"ICDM-RX/TCP-16RJ45/RJ45-RM","product":{"name":"ICDM-RX/TCP-16RJ45/RJ45-RM","product_id":"CSAFPID-11703","product_identification_helper":{"model_numbers":["70114048"]}}},{"category":"product_name","name":"ICDM-RX/TCP-2DB9/RJ45-DIN","product":{"name":"ICDM-RX/TCP-2DB9/RJ45-DIN","product_id":"CSAFPID-11704","product_identification_helper":{"model_numbers":["70114044"]}}},{"category":"product_name","name":"ICDM-RX/TCP-2ST/RJ45-DIN","product":{"name":"ICDM-RX/TCP-2ST/RJ45-DIN","product_id":"CSAFPID-11705","product_identification_helper":{"model_numbers":["70114045"]}}},{"category":"product_name","name":"ICDM-RX/TCP-32RJ45/RJ45-RM","product":{"name":"ICDM-RX/TCP-32RJ45/RJ45-RM","product_id":"CSAFPID-11706","product_identification_helper":{"model_numbers":["70114050"]}}},{"category":"product_name","name":"ICDM-RX/TCP-4DB9/2RJ45-DIN","product":{"name":"ICDM-RX/TCP-4DB9/2RJ45-DIN","product_id":"CSAFPID-11707","product_identification_helper":{"model_numbers":["70104869"]}}},{"category":"product_name","name":"ICDM-RX/TCP-4DB9/2RJ45-PM","product":{"name":"ICDM-RX/TCP-4DB9/2RJ45-PM","product_id":"CSAFPID-11708","product_identification_helper":{"model_numbers":["70114046"]}}},{"category":"product_name","name":"ICDM-RX/TCP-8DB9/2RJ45-PM","product":{"name":"ICDM-RX/TCP-8DB9/2RJ45-PM","product_id":"CSAFPID-11709","product_identification_helper":{"model_numbers":["70114047"]}}},{"category":"product_name","name":"ICDM-RX/TCP-DB9/RJ45-DIN","product":{"name":"ICDM-RX/TCP-DB9/RJ45-DIN","product_id":"CSAFPID-11710","product_identification_helper":{"model_numbers":["70104867"]}}},{"category":"product_name","name":"ICDM-RX/TCP-DB9/RJ45-PM","product":{"name":"ICDM-RX/TCP-DB9/RJ45-PM","product_id":"CSAFPID-11711","product_identification_helper":{"model_numbers":["70104885"]}}},{"category":"product_name","name":"ICDM-RX/TCP-DB9/RJ45-PM2","product":{"name":"ICDM-RX/TCP-DB9/RJ45-PM2","product_id":"CSAFPID-11712","product_identification_helper":{"model_numbers":["70139038"]}}},{"category":"product_name","name":"ICDM-RX/TCP-ST/RJ45-DIN","product":{"name":"ICDM-RX/TCP-ST/RJ45-DIN","product_id":"CSAFPID-11713","product_identification_helper":{"model_numbers":["70104868"]}}}],"category":"product_family","name":"RX/TCP SocketServer"}],"category":"product_family","name":"Hardware"},{"branches":[{"branches":[{"category":"product_version","name":"v1.09","product":{"name":"Firmware EIP/Modbus v1.09","product_id":"CSAFPID-22001"}},{"category":"product_version_range","name":"<v1.08","product":{"name":"Firmware EIP/Modbus <v1.08","product_id":"CSAFPID-21001"}}],"category":"product_family","name":"EIP/Modbus"},{"branches":[{"category":"product_version","name":"v7.23","product":{"name":"Firmware EtherNet/IP v7.23","product_id":"CSAFPID-22101"}},{"category":"product_version_range","name":"<v7.22","product":{"name":"Firmware EtherNet/IP <v7.22","product_id":"CSAFPID-21101"}}],"category":"product_family","name":"EtherNet/IP"},{"branches":[{"category":"product_version","name":"v7.10","product":{"name":"Firmware Modbus Router v7.10","product_id":"CSAFPID-22201"}},{"category":"product_version_range","name":"<v7.09","product":{"name":"Firmware Modbus Router <v7.09","product_id":"CSAFPID-21201"}}],"category":"product_family","name":"Modbus Router"},{"branches":[{"category":"product_version","name":"v7.12","product":{"name":"Firmware Modbus TCP v7.12","product_id":"CSAFPID-22301"}},{"category":"product_version_range","name":"<v7.11","product":{"name":"Firmware Modbus TCP <v7.11","product_id":"CSAFPID-21301"}}],"category":"product_family","name":"Modbus TCP"},{"branches":[{"category":"product_version","name":"v7.12","product":{"name":"Firmware Modbus Server v7.12","product_id":"CSAFPID-22401"}},{"category":"product_version_range","name":"<v7.11","product":{"name":"Firmware Modbus Server <v7.11","product_id":"CSAFPID-21401"}}],"category":"product_family","name":"Modbus Server"},{"branches":[{"category":"product_version","name":"v1.0.8","product":{"name":"Firmware PROFINET/Modbus v1.0.8","product_id":"CSAFPID-22501"}},{"category":"product_version_range","name":"<v1.0.7","product":{"name":"Firmware PROFINET/Modbus <v1.0.7","product_id":"CSAFPID-21501"}}],"category":"product_family","name":"PROFINET/Modbus"},{"branches":[{"category":"product_version","name":"v3.4.10","product":{"name":"Firmware PROFINET v3.4.10","product_id":"CSAFPID-22601"}},{"category":"product_version_range","name":"<v3.4.9","product":{"name":"Firmware PROFINET <v3.4.9","product_id":"CSAFPID-21601"}}],"category":"product_family","name":"PROFINET"},{"branches":[{"category":"product_version","name":"v11.66","product":{"name":"Firmware SocketServer v11.66","product_id":"CSAFPID-22701"}},{"category":"product_version_range","name":"<v11.65","product":{"name":"Firmware SocketServer <v11.65","product_id":"CSAFPID-21701"}}],"category":"product_family","name":"SocketServer"}],"category":"product_family","name":"Firmware"}],"category":"vendor","name":"Pepperl+Fuchs"}],"product_groups":[{"group_id":"CSAFGID-0001","product_ids":["CSAFPID-31001","CSAFPID-31002","CSAFPID-31003","CSAFPID-31004","CSAFPID-31005","CSAFPID-31006","CSAFPID-31101","CSAFPID-31102","CSAFPID-31103","CSAFPID-31104","CSAFPID-31105","CSAFPID-31106","CSAFPID-31201","CSAFPID-31202","CSAFPID-31203","CSAFPID-31301","CSAFPID-31302","CSAFPID-31303","CSAFPID-31401","CSAFPID-31402","CSAFPID-31403","CSAFPID-31501","CSAFPID-31502","CSAFPID-31503","CSAFPID-31504","CSAFPID-31505","CSAFPID-31506","CSAFPID-31601","CSAFPID-31602","CSAFPID-31603","CSAFPID-31604","CSAFPID-31605","CSAFPID-31606","CSAFPID-31701","CSAFPID-31702","CSAFPID-31703","CSAFPID-31704","CSAFPID-31705","CSAFPID-31706","CSAFPID-31707","CSAFPID-31708","CSAFPID-31709","CSAFPID-31710","CSAFPID-31711","CSAFPID-31712","CSAFPID-31713"],"summary":"Affected products."},{"group_id":"CSAFGID-0002","product_ids":["CSAFPID-32001","CSAFPID-32002","CSAFPID-32003","CSAFPID-32004","CSAFPID-32005","CSAFPID-32006","CSAFPID-32101","CSAFPID-32102","CSAFPID-32103","CSAFPID-32104","CSAFPID-32105","CSAFPID-32106","CSAFPID-32201","CSAFPID-32202","CSAFPID-32203","CSAFPID-32301","CSAFPID-32302","CSAFPID-32303","CSAFPID-32401","CSAFPID-32402","CSAFPID-32403","CSAFPID-32501","CSAFPID-32502","CSAFPID-32503","CSAFPID-32504","CSAFPID-32505","CSAFPID-32506","CSAFPID-32601","CSAFPID-32602","CSAFPID-32603","CSAFPID-32604","CSAFPID-32605","CSAFPID-32606","CSAFPID-32701","CSAFPID-32702","CSAFPID-32703","CSAFPID-32704","CSAFPID-32705","CSAFPID-32706","CSAFPID-32707","CSAFPID-32708","CSAFPID-32709","CSAFPID-32710","CSAFPID-32711","CSAFPID-32712","CSAFPID-32713"],"summary":"Fixed products."}],"relationships":[{"category":"installed_on","full_product_name":{"name":"Firmware EIP/Modbus <v1.08 installed on ICDM-RX/EN1-2DB9/RJ45-DIN","product_id":"CSAFPID-31001"},"product_reference":"CSAFPID-21001","relates_to_product_reference":"CSAFPID-11001"},{"category":"installed_on","full_product_name":{"name":"Firmware EIP/Modbus <v1.08 installed on ICDM-RX/EN1-2ST/RJ45-DIN","product_id":"CSAFPID-31002"},"product_reference":"CSAFPID-21001","relates_to_product_reference":"CSAFPID-11002"},{"category":"installed_on","full_product_name":{"name":"Firmware EIP/Modbus <v1.08 installed on ICDM-RX/EN1-4DB9/2RJ45-DIN","product_id":"CSAFPID-31003"},"product_reference":"CSAFPID-21001","relates_to_product_reference":"CSAFPID-11003"},{"category":"installed_on","full_product_name":{"name":"Firmware EIP/Modbus <v1.08 installed on ICDM-RX/EN1-DB9/RJ45-DIN","product_id":"CSAFPID-31004"},"product_reference":"CSAFPID-21001","relates_to_product_reference":"CSAFPID-11004"},{"category":"installed_on","full_product_name":{"name":"Firmware EIP/Modbus <v1.08 installed on ICDM-RX/EN1-DB9/RJ45-PM","product_id":"CSAFPID-31005"},"product_reference":"CSAFPID-21001","relates_to_product_reference":"CSAFPID-11005"},{"category":"installed_on","full_product_name":{"name":"Firmware EIP/Modbus <v1.08 installed on ICDM-RX/EN1-ST/RJ45-DIN","product_id":"CSAFPID-31006"},"product_reference":"CSAFPID-21001","relates_to_product_reference":"CSAFPID-11006"},{"category":"installed_on","full_product_name":{"name":"Firmware EtherNet/IP <v7.22 installed on ICDM-RX/EN-2DB9/RJ45-DIN","product_id":"CSAFPID-31101"},"product_reference":"CSAFPID-21101","relates_to_product_reference":"CSAFPID-11101"},{"category":"installed_on","full_product_name":{"name":"Firmware EtherNet/IP <v7.22 installed on ICDM-RX/EN-2ST/RJ45-DIN","product_id":"CSAFPID-31102"},"product_reference":"CSAFPID-21101","relates_to_product_reference":"CSAFPID-11102"},{"category":"installed_on","full_product_name":{"name":"Firmware EtherNet/IP <v7.22 installed on ICDM-RX/EN-4DB9/2RJ45-DIN","product_id":"CSAFPID-31103"},"product_reference":"CSAFPID-21101","relates_to_product_reference":"CSAFPID-11103"},{"category":"installed_on","full_product_name":{"name":"Firmware EtherNet/IP <v7.22 installed on ICDM-RX/EN-DB9/RJ45-DIN","product_id":"CSAFPID-31104"},"product_reference":"CSAFPID-21101","relates_to_product_reference":"CSAFPID-11104"},{"category":"installed_on","full_product_name":{"name":"Firmware EtherNet/IP <v7.22 installed on ICDM-RX/EN-DB9/RJ45-PM","product_id":"CSAFPID-31105"},"product_reference":"CSAFPID-21101","relates_to_product_reference":"CSAFPID-11105"},{"category":"installed_on","full_product_name":{"name":"Firmware EtherNet/IP <v7.22 installed on ICDM-RX/EN-ST/RJ45-DIN","product_id":"CSAFPID-31106"},"product_reference":"CSAFPID-21101","relates_to_product_reference":"CSAFPID-11106"},{"category":"installed_on","full_product_name":{"name":"Firmware Modbus Router <v7.09 installed on ICDM-RX/MOD-4DB9/2RJ45-DIN","product_id":"CSAFPID-31201"},"product_reference":"CSAFPID-21201","relates_to_product_reference":"CSAFPID-11201"},{"category":"installed_on","full_product_name":{"name":"Firmware Modbus TCP <v7.11 installed on ICDM-RX/MOD-4DB9/2RJ45-DIN","product_id":"CSAFPID-31301"},"product_reference":"CSAFPID-21301","relates_to_product_reference":"CSAFPID-11201"},{"category":"installed_on","full_product_name":{"name":"Firmware Modbus Server <v7.11 installed on ICDM-RX/MOD-4DB9/2RJ45-DIN","product_id":"CSAFPID-31401"},"product_reference":"CSAFPID-21401","relates_to_product_reference":"CSAFPID-11201"},{"category":"installed_on","full_product_name":{"name":"Firmware Modbus Router <v7.09 installed on ICDM-RX/MOD-DB9/RJ45-DIN","product_id":"CSAFPID-31202"},"product_reference":"CSAFPID-21201","relates_to_product_reference":"CSAFPID-11202"},{"category":"installed_on","full_product_name":{"name":"Firmware Modbus TCP <v7.11 installed on ICDM-RX/MOD-DB9/RJ45-DIN","product_id":"CSAFPID-31302"},"product_reference":"CSAFPID-21301","relates_to_product_reference":"CSAFPID-11202"},{"category":"installed_on","full_product_name":{"name":"Firmware Modbus Server <v7.11 installed on ICDM-RX/MOD-DB9/RJ45-DIN","product_id":"CSAFPID-31402"},"product_reference":"CSAFPID-21401","relates_to_product_reference":"CSAFPID-11202"},{"category":"installed_on","full_product_name":{"name":"Firmware Modbus Router <v7.09 installed on ICDM-RX/MOD-ST/RJ45-DIN","product_id":"CSAFPID-31203"},"product_reference":"CSAFPID-21201","relates_to_product_reference":"CSAFPID-11203"},{"category":"installed_on","full_product_name":{"name":"Firmware Modbus TCP <v7.11 installed on ICDM-RX/MOD-ST/RJ45-DIN","product_id":"CSAFPID-31303"},"product_reference":"CSAFPID-21301","relates_to_product_reference":"CSAFPID-11203"},{"category":"installed_on","full_product_name":{"name":"Firmware Modbus Server <v7.11 installed on ICDM-RX/MOD-ST/RJ45-DIN","product_id":"CSAFPID-31403"},"product_reference":"CSAFPID-21401","relates_to_product_reference":"CSAFPID-11203"},{"category":"installed_on","full_product_name":{"name":"Firmware PROFINET/Modbus <v1.0.7 installed on ICDM-RX/PN1-2DB9/RJ45-DIN","product_id":"CSAFPID-31501"},"product_reference":"CSAFPID-21501","relates_to_product_reference":"CSAFPID-11501"},{"category":"installed_on","full_product_name":{"name":"Firmware PROFINET/Modbus <v1.0.7 installed on ICDM-RX/PN1-2ST/RJ45-DIN","product_id":"CSAFPID-31502"},"product_reference":"CSAFPID-21501","relates_to_product_reference":"CSAFPID-11502"},{"category":"installed_on","full_product_name":{"name":"Firmware PROFINET/Modbus <v1.0.7 installed on ICDM-RX/PN1-4DB9/2RJ45-DIN","product_id":"CSAFPID-31503"},"product_reference":"CSAFPID-21501","relates_to_product_reference":"CSAFPID-11503"},{"category":"installed_on","full_product_name":{"name":"Firmware PROFINET/Modbus <v1.0.7 installed on ICDM-RX/PN1-DB9/RJ45-DIN","product_id":"CSAFPID-31504"},"product_reference":"CSAFPID-21501","relates_to_product_reference":"CSAFPID-11504"},{"category":"installed_on","full_product_name":{"name":"Firmware PROFINET/Modbus <v1.0.7 installed on ICDM-RX/PN1-DB9/RJ45-PM","product_id":"CSAFPID-31505"},"product_reference":"CSAFPID-21501","relates_to_product_reference":"CSAFPID-11505"},{"category":"installed_on","full_product_name":{"name":"Firmware PROFINET/Modbus <v1.0.7 installed on ICDM-RX/PN1-ST/RJ45-DIN","product_id":"CSAFPID-31506"},"product_reference":"CSAFPID-21501","relates_to_product_reference":"CSAFPID-11506"},{"category":"installed_on","full_product_name":{"name":"Firmware PROFINET <v3.4.9 installed on ICDM-RX/PN-2DB9/RJ45-DIN","product_id":"CSAFPID-31601"},"product_reference":"CSAFPID-21601","relates_to_product_reference":"CSAFPID-11601"},{"category":"installed_on","full_product_name":{"name":"Firmware PROFINET <v3.4.9 installed on ICDM-RX/PN-2ST/RJ45-DIN","product_id":"CSAFPID-31602"},"product_reference":"CSAFPID-21601","relates_to_product_reference":"CSAFPID-11602"},{"category":"installed_on","full_product_name":{"name":"Firmware PROFINET <v3.4.9 installed on ICDM-RX/PN-4DB9/2RJ45-DIN","product_id":"CSAFPID-31603"},"product_reference":"CSAFPID-21601","relates_to_product_reference":"CSAFPID-11603"},{"category":"installed_on","full_product_name":{"name":"Firmware PROFINET <v3.4.9 installed on ICDM-RX/PN-DB9/RJ45-DIN","product_id":"CSAFPID-31604"},"product_reference":"CSAFPID-21601","relates_to_product_reference":"CSAFPID-11604"},{"category":"installed_on","full_product_name":{"name":"Firmware PROFINET <v3.4.9 installed on ICDM-RX/PN-DB9/RJ45-PM","product_id":"CSAFPID-31605"},"product_reference":"CSAFPID-21601","relates_to_product_reference":"CSAFPID-11605"},{"category":"installed_on","full_product_name":{"name":"Firmware PROFINET <v3.4.9 installed on ICDM-RX/PN-ST/RJ45-DIN","product_id":"CSAFPID-31606"},"product_reference":"CSAFPID-21601","relates_to_product_reference":"CSAFPID-11606"},{"category":"installed_on","full_product_name":{"name":"Firmware SocketServer <v11.65 installed on ICDM-RX/TCP-16DB9/RJ45-RM","product_id":"CSAFPID-31701"},"product_reference":"CSAFPID-21701","relates_to_product_reference":"CSAFPID-11701"},{"category":"installed_on","full_product_name":{"name":"Firmware SocketServer <v11.65 installed on ICDM-RX/TCP-16RJ45/2RJ45-PM","product_id":"CSAFPID-31702"},"product_reference":"CSAFPID-21701","relates_to_product_reference":"CSAFPID-11702"},{"category":"installed_on","full_product_name":{"name":"Firmware SocketServer <v11.65 installed on ICDM-RX/TCP-16RJ45/RJ45-RM","product_id":"CSAFPID-31703"},"product_reference":"CSAFPID-21701","relates_to_product_reference":"CSAFPID-11703"},{"category":"installed_on","full_product_name":{"name":"Firmware SocketServer <v11.65 installed on ICDM-RX/TCP-2DB9/RJ45-DIN","product_id":"CSAFPID-31704"},"product_reference":"CSAFPID-21701","relates_to_product_reference":"CSAFPID-11704"},{"category":"installed_on","full_product_name":{"name":"Firmware SocketServer <v11.65 installed on ICDM-RX/TCP-2ST/RJ45-DIN","product_id":"CSAFPID-31705"},"product_reference":"CSAFPID-21701","relates_to_product_reference":"CSAFPID-11705"},{"category":"installed_on","full_product_name":{"name":"Firmware SocketServer <v11.65 installed on ICDM-RX/TCP-32RJ45/RJ45-RM","product_id":"CSAFPID-31706"},"product_reference":"CSAFPID-21701","relates_to_product_reference":"CSAFPID-11706"},{"category":"installed_on","full_product_name":{"name":"Firmware SocketServer <v11.65 installed on ICDM-RX/TCP-4DB9/2RJ45-DIN","product_id":"CSAFPID-31707"},"product_reference":"CSAFPID-21701","relates_to_product_reference":"CSAFPID-11707"},{"category":"installed_on","full_product_name":{"name":"Firmware SocketServer <v11.65 installed on ICDM-RX/TCP-4DB9/2RJ45-PM","product_id":"CSAFPID-31708"},"product_reference":"CSAFPID-21701","relates_to_product_reference":"CSAFPID-11708"},{"category":"installed_on","full_product_name":{"name":"Firmware SocketServer <v11.65 installed on ICDM-RX/TCP-8DB9/2RJ45-PM","product_id":"CSAFPID-31709"},"product_reference":"CSAFPID-21701","relates_to_product_reference":"CSAFPID-11709"},{"category":"installed_on","full_product_name":{"name":"Firmware SocketServer <v11.65 installed on ICDM-RX/TCP-DB9/RJ45-DIN","product_id":"CSAFPID-31710"},"product_reference":"CSAFPID-21701","relates_to_product_reference":"CSAFPID-11710"},{"category":"installed_on","full_product_name":{"name":"Firmware SocketServer <v11.65 installed on ICDM-RX/TCP-DB9/RJ45-PM","product_id":"CSAFPID-31711"},"product_reference":"CSAFPID-21701","relates_to_product_reference":"CSAFPID-11711"},{"category":"installed_on","full_product_name":{"name":"Firmware SocketServer <v11.65 installed on ICDM-RX/TCP-DB9/RJ45-PM2","product_id":"CSAFPID-31712"},"product_reference":"CSAFPID-21701","relates_to_product_reference":"CSAFPID-11712"},{"category":"installed_on","full_product_name":{"name":"Firmware SocketServer <v11.65 installed on ICDM-RX/TCP-ST/RJ45-DIN","product_id":"CSAFPID-31713"},"product_reference":"CSAFPID-21701","relates_to_product_reference":"CSAFPID-11713"},{"category":"installed_on","full_product_name":{"name":"Firmware EIP/Modbus v1.09 installed on ICDM-RX/EN1-2DB9/RJ45-DIN","product_id":"CSAFPID-32001"},"product_reference":"CSAFPID-22001","relates_to_product_reference":"CSAFPID-11001"},{"category":"installed_on","full_product_name":{"name":"Firmware EIP/Modbus v1.09 installed on ICDM-RX/EN1-2ST/RJ45-DIN","product_id":"CSAFPID-32002"},"product_reference":"CSAFPID-22001","relates_to_product_reference":"CSAFPID-11002"},{"category":"installed_on","full_product_name":{"name":"Firmware EIP/Modbus v1.09 installed on ICDM-RX/EN1-4DB9/2RJ45-DIN","product_id":"CSAFPID-32003"},"product_reference":"CSAFPID-22001","relates_to_product_reference":"CSAFPID-11003"},{"category":"installed_on","full_product_name":{"name":"Firmware EIP/Modbus v1.09 installed on ICDM-RX/EN1-DB9/RJ45-DIN","product_id":"CSAFPID-32004"},"product_reference":"CSAFPID-22001","relates_to_product_reference":"CSAFPID-11004"},{"category":"installed_on","full_product_name":{"name":"Firmware EIP/Modbus v1.09 installed on ICDM-RX/EN1-DB9/RJ45-PM","product_id":"CSAFPID-32005"},"product_reference":"CSAFPID-22001","relates_to_product_reference":"CSAFPID-11005"},{"category":"installed_on","full_product_name":{"name":"Firmware EIP/Modbus v1.09 installed on ICDM-RX/EN1-ST/RJ45-DIN","product_id":"CSAFPID-32006"},"product_reference":"CSAFPID-22001","relates_to_product_reference":"CSAFPID-11006"},{"category":"installed_on","full_product_name":{"name":"Firmware EtherNet/IP v7.23 installed on ICDM-RX/EN-2DB9/RJ45-DIN","product_id":"CSAFPID-32101"},"product_reference":"CSAFPID-22101","relates_to_product_reference":"CSAFPID-11101"},{"category":"installed_on","full_product_name":{"name":"Firmware EtherNet/IP v7.23 installed on ICDM-RX/EN-2ST/RJ45-DIN","product_id":"CSAFPID-32102"},"product_reference":"CSAFPID-22101","relates_to_product_reference":"CSAFPID-11102"},{"category":"installed_on","full_product_name":{"name":"Firmware EtherNet/IP v7.23 installed on ICDM-RX/EN-4DB9/2RJ45-DIN","product_id":"CSAFPID-32103"},"product_reference":"CSAFPID-22101","relates_to_product_reference":"CSAFPID-11103"},{"category":"installed_on","full_product_name":{"name":"Firmware EtherNet/IP v7.23 installed on ICDM-RX/EN-DB9/RJ45-DIN","product_id":"CSAFPID-32104"},"product_reference":"CSAFPID-22101","relates_to_product_reference":"CSAFPID-11104"},{"category":"installed_on","full_product_name":{"name":"Firmware EtherNet/IP v7.23 installed on ICDM-RX/EN-DB9/RJ45-PM","product_id":"CSAFPID-32105"},"product_reference":"CSAFPID-22101","relates_to_product_reference":"CSAFPID-11105"},{"category":"installed_on","full_product_name":{"name":"Firmware EtherNet/IP v7.23 installed on ICDM-RX/EN-ST/RJ45-DIN","product_id":"CSAFPID-32106"},"product_reference":"CSAFPID-22101","relates_to_product_reference":"CSAFPID-11106"},{"category":"installed_on","full_product_name":{"name":"Firmware Modbus Router v7.10 installed on ICDM-RX/MOD-4DB9/2RJ45-DIN","product_id":"CSAFPID-32201"},"product_reference":"CSAFPID-22201","relates_to_product_reference":"CSAFPID-11201"},{"category":"installed_on","full_product_name":{"name":"Firmware Modbus TCP v7.12 installed on ICDM-RX/MOD-4DB9/2RJ45-DIN","product_id":"CSAFPID-32301"},"product_reference":"CSAFPID-22301","relates_to_product_reference":"CSAFPID-11201"},{"category":"installed_on","full_product_name":{"name":"Firmware Modbus Server v7.12 installed on ICDM-RX/MOD-4DB9/2RJ45-DIN","product_id":"CSAFPID-32401"},"product_reference":"CSAFPID-22401","relates_to_product_reference":"CSAFPID-11201"},{"category":"installed_on","full_product_name":{"name":"Firmware Modbus Router <v7.09 installed on ICDM-RX/MOD-DB9/RJ45-DIN","product_id":"CSAFPID-32202"},"product_reference":"CSAFPID-21201","relates_to_product_reference":"CSAFPID-11202"},{"category":"installed_on","full_product_name":{"name":"Firmware Modbus TCP v7.12 installed on ICDM-RX/MOD-DB9/RJ45-DIN","product_id":"CSAFPID-32302"},"product_reference":"CSAFPID-22301","relates_to_product_reference":"CSAFPID-11202"},{"category":"installed_on","full_product_name":{"name":"Firmware Modbus Server v7.12 installed on ICDM-RX/MOD-DB9/RJ45-DIN","product_id":"CSAFPID-32402"},"product_reference":"CSAFPID-22401","relates_to_product_reference":"CSAFPID-11202"},{"category":"installed_on","full_product_name":{"name":"Firmware Modbus Router v7.10 installed on ICDM-RX/MOD-ST/RJ45-DIN","product_id":"CSAFPID-32203"},"product_reference":"CSAFPID-22201","relates_to_product_reference":"CSAFPID-11203"},{"category":"installed_on","full_product_name":{"name":"Firmware Modbus TCP v7.12 installed on ICDM-RX/MOD-ST/RJ45-DIN","product_id":"CSAFPID-32303"},"product_reference":"CSAFPID-22301","relates_to_product_reference":"CSAFPID-11203"},{"category":"installed_on","full_product_name":{"name":"Firmware Modbus Server v7.12 installed on ICDM-RX/MOD-ST/RJ45-DIN","product_id":"CSAFPID-32403"},"product_reference":"CSAFPID-22401","relates_to_product_reference":"CSAFPID-11203"},{"category":"installed_on","full_product_name":{"name":"Firmware PROFINET/Modbus v1.0.8 installed on ICDM-RX/PN1-2DB9/RJ45-DIN","product_id":"CSAFPID-32501"},"product_reference":"CSAFPID-22501","relates_to_product_reference":"CSAFPID-11501"},{"category":"installed_on","full_product_name":{"name":"Firmware PROFINET/Modbus v1.0.8 installed on ICDM-RX/PN1-2ST/RJ45-DIN","product_id":"CSAFPID-32502"},"product_reference":"CSAFPID-22501","relates_to_product_reference":"CSAFPID-11502"},{"category":"installed_on","full_product_name":{"name":"Firmware PROFINET/Modbus v1.0.8 installed on ICDM-RX/PN1-4DB9/2RJ45-DIN","product_id":"CSAFPID-32503"},"product_reference":"CSAFPID-22501","relates_to_product_reference":"CSAFPID-11503"},{"category":"installed_on","full_product_name":{"name":"Firmware PROFINET/Modbus v1.0.8 installed on ICDM-RX/PN1-DB9/RJ45-DIN","product_id":"CSAFPID-32504"},"product_reference":"CSAFPID-22501","relates_to_product_reference":"CSAFPID-11504"},{"category":"installed_on","full_product_name":{"name":"Firmware PROFINET/Modbus v1.0.8 installed on ICDM-RX/PN1-DB9/RJ45-PM","product_id":"CSAFPID-32505"},"product_reference":"CSAFPID-22501","relates_to_product_reference":"CSAFPID-11505"},{"category":"installed_on","full_product_name":{"name":"Firmware PROFINET/Modbus v1.0.8 installed on ICDM-RX/PN1-ST/RJ45-DIN","product_id":"CSAFPID-32506"},"product_reference":"CSAFPID-22501","relates_to_product_reference":"CSAFPID-11506"},{"category":"installed_on","full_product_name":{"name":"Firmware PROFINET v3.4.10 installed on ICDM-RX/PN-2DB9/RJ45-DIN","product_id":"CSAFPID-32601"},"product_reference":"CSAFPID-22601","relates_to_product_reference":"CSAFPID-11601"},{"category":"installed_on","full_product_name":{"name":"Firmware PROFINET v3.4.10 installed on ICDM-RX/PN-2ST/RJ45-DIN","product_id":"CSAFPID-32602"},"product_reference":"CSAFPID-22601","relates_to_product_reference":"CSAFPID-11602"},{"category":"installed_on","full_product_name":{"name":"Firmware PROFINET v3.4.10 installed on ICDM-RX/PN-4DB9/2RJ45-DIN","product_id":"CSAFPID-32603"},"product_reference":"CSAFPID-22601","relates_to_product_reference":"CSAFPID-11603"},{"category":"installed_on","full_product_name":{"name":"Firmware PROFINET v3.4.10 installed on ICDM-RX/PN-DB9/RJ45-DIN","product_id":"CSAFPID-32604"},"product_reference":"CSAFPID-22601","relates_to_product_reference":"CSAFPID-11604"},{"category":"installed_on","full_product_name":{"name":"Firmware PROFINET v3.4.10 installed on ICDM-RX/PN-DB9/RJ45-PM","product_id":"CSAFPID-32605"},"product_reference":"CSAFPID-22601","relates_to_product_reference":"CSAFPID-11605"},{"category":"installed_on","full_product_name":{"name":"Firmware PROFINET v3.4.10 installed on ICDM-RX/PN-ST/RJ45-DIN","product_id":"CSAFPID-32606"},"product_reference":"CSAFPID-22601","relates_to_product_reference":"CSAFPID-11606"},{"category":"installed_on","full_product_name":{"name":"Firmware SocketServer v11.66 installed on ICDM-RX/TCP-16DB9/RJ45-RM","product_id":"CSAFPID-32701"},"product_reference":"CSAFPID-22701","relates_to_product_reference":"CSAFPID-11701"},{"category":"installed_on","full_product_name":{"name":"Firmware SocketServer v11.66 installed on ICDM-RX/TCP-16RJ45/2RJ45-PM","product_id":"CSAFPID-32702"},"product_reference":"CSAFPID-22701","relates_to_product_reference":"CSAFPID-11702"},{"category":"installed_on","full_product_name":{"name":"Firmware SocketServer v11.66 installed on ICDM-RX/TCP-16RJ45/RJ45-RM","product_id":"CSAFPID-32703"},"product_reference":"CSAFPID-22701","relates_to_product_reference":"CSAFPID-11703"},{"category":"installed_on","full_product_name":{"name":"Firmware SocketServer v11.66 installed on ICDM-RX/TCP-2DB9/RJ45-DIN","product_id":"CSAFPID-32704"},"product_reference":"CSAFPID-22701","relates_to_product_reference":"CSAFPID-11704"},{"category":"installed_on","full_product_name":{"name":"Firmware SocketServer v11.66 installed on ICDM-RX/TCP-2ST/RJ45-DIN","product_id":"CSAFPID-32705"},"product_reference":"CSAFPID-22701","relates_to_product_reference":"CSAFPID-11705"},{"category":"installed_on","full_product_name":{"name":"Firmware SocketServer v11.66 installed on ICDM-RX/TCP-32RJ45/RJ45-RM","product_id":"CSAFPID-32706"},"product_reference":"CSAFPID-22701","relates_to_product_reference":"CSAFPID-11706"},{"category":"installed_on","full_product_name":{"name":"Firmware SocketServer v11.66 installed on ICDM-RX/TCP-4DB9/2RJ45-DIN","product_id":"CSAFPID-32707"},"product_reference":"CSAFPID-22701","relates_to_product_reference":"CSAFPID-11707"},{"category":"installed_on","full_product_name":{"name":"Firmware SocketServer v11.66 installed on ICDM-RX/TCP-4DB9/2RJ45-PM","product_id":"CSAFPID-32708"},"product_reference":"CSAFPID-22701","relates_to_product_reference":"CSAFPID-11708"},{"category":"installed_on","full_product_name":{"name":"Firmware SocketServer v11.66 installed on ICDM-RX/TCP-8DB9/2RJ45-PM","product_id":"CSAFPID-32709"},"product_reference":"CSAFPID-22701","relates_to_product_reference":"CSAFPID-11709"},{"category":"installed_on","full_product_name":{"name":"Firmware SocketServer v11.66 installed on ICDM-RX/TCP-DB9/RJ45-DIN","product_id":"CSAFPID-32710"},"product_reference":"CSAFPID-22701","relates_to_product_reference":"CSAFPID-11710"},{"category":"installed_on","full_product_name":{"name":"Firmware SocketServer v11.66 installed on ICDM-RX/TCP-DB9/RJ45-PM","product_id":"CSAFPID-32711"},"product_reference":"CSAFPID-22701","relates_to_product_reference":"CSAFPID-11711"},{"category":"installed_on","full_product_name":{"name":"Firmware SocketServer v11.66 installed on ICDM-RX/TCP-DB9/RJ45-PM2","product_id":"CSAFPID-32712"},"product_reference":"CSAFPID-22701","relates_to_product_reference":"CSAFPID-11712"},{"category":"installed_on","full_product_name":{"name":"Firmware SocketServer v11.66 installed on ICDM-RX/TCP-ST/RJ45-DIN","product_id":"CSAFPID-32713"},"product_reference":"CSAFPID-22701","relates_to_product_reference":"CSAFPID-11713"}]},"vulnerabilities":[{"cve":"CVE-2024-38502","cwe":{"id":"CWE-79","name":"Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')"},"notes":[{"audience":"all","category":"description","text":"An unauthenticated remote attacker may use stored XSS vulnerability to obtain information from a user or reboot the affected device once.","title":"Vulnerability Description"}],"product_status":{"fixed":["CSAFPID-32001","CSAFPID-32002","CSAFPID-32003","CSAFPID-32004","CSAFPID-32005","CSAFPID-32006","CSAFPID-32101","CSAFPID-32102","CSAFPID-32103","CSAFPID-32104","CSAFPID-32105","CSAFPID-32106","CSAFPID-32201","CSAFPID-32202","CSAFPID-32203","CSAFPID-32301","CSAFPID-32302","CSAFPID-32303","CSAFPID-32401","CSAFPID-32402","CSAFPID-32403","CSAFPID-32501","CSAFPID-32502","CSAFPID-32503","CSAFPID-32504","CSAFPID-32505","CSAFPID-32506","CSAFPID-32601","CSAFPID-32602","CSAFPID-32603","CSAFPID-32604","CSAFPID-32605","CSAFPID-32606","CSAFPID-32701","CSAFPID-32702","CSAFPID-32703","CSAFPID-32704","CSAFPID-32705","CSAFPID-32706","CSAFPID-32707","CSAFPID-32708","CSAFPID-32709","CSAFPID-32710","CSAFPID-32711","CSAFPID-32712","CSAFPID-32713"],"known_affected":["CSAFPID-31001","CSAFPID-31002","CSAFPID-31003","CSAFPID-31004","CSAFPID-31005","CSAFPID-31006","CSAFPID-31101","CSAFPID-31102","CSAFPID-31103","CSAFPID-31104","CSAFPID-31105","CSAFPID-31106","CSAFPID-31201","CSAFPID-31202","CSAFPID-31203","CSAFPID-31301","CSAFPID-31302","CSAFPID-31303","CSAFPID-31401","CSAFPID-31402","CSAFPID-31403","CSAFPID-31501","CSAFPID-31502","CSAFPID-31503","CSAFPID-31504","CSAFPID-31505","CSAFPID-31506","CSAFPID-31601","CSAFPID-31602","CSAFPID-31603","CSAFPID-31604","CSAFPID-31605","CSAFPID-31606","CSAFPID-31701","CSAFPID-31702","CSAFPID-31703","CSAFPID-31704","CSAFPID-31705","CSAFPID-31706","CSAFPID-31707","CSAFPID-31708","CSAFPID-31709","CSAFPID-31710","CSAFPID-31711","CSAFPID-31712","CSAFPID-31713"]},"remediations":[{"category":"vendor_fix","details":"Update to a new version of the firmware you are using:\n * SocketServer v11.66\n * PROFINET v3.4.10\n * PROFINET/Modbus v1.0.8\n * EtherNet/IP v7.23\n * EIP/Modbus v1.09\n * Modbus Router v7.10\n * Modbus Server v7.12\n * Modbus TCP v7.12","group_ids":["CSAFGID-0001"]}],"scores":[{"cvss_v3":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"LOW","baseScore":7.1,"baseSeverity":"HIGH","confidentialityImpact":"LOW","environmentalScore":7.1,"environmentalSeverity":"HIGH","integrityImpact":"LOW","privilegesRequired":"NONE","scope":"CHANGED","temporalScore":7.1,"temporalSeverity":"HIGH","userInteraction":"REQUIRED","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L","version":"3.1"},"products":["CSAFPID-31001","CSAFPID-31002","CSAFPID-31003","CSAFPID-31004","CSAFPID-31005","CSAFPID-31006","CSAFPID-31101","CSAFPID-31102","CSAFPID-31103","CSAFPID-31104","CSAFPID-31105","CSAFPID-31106","CSAFPID-31201","CSAFPID-31202","CSAFPID-31203","CSAFPID-31301","CSAFPID-31302","CSAFPID-31303","CSAFPID-31401","CSAFPID-31402","CSAFPID-31403","CSAFPID-31501","CSAFPID-31502","CSAFPID-31503","CSAFPID-31504","CSAFPID-31505","CSAFPID-31506","CSAFPID-31601","CSAFPID-31602","CSAFPID-31603","CSAFPID-31604","CSAFPID-31605","CSAFPID-31606","CSAFPID-31701","CSAFPID-31702","CSAFPID-31703","CSAFPID-31704","CSAFPID-31705","CSAFPID-31706","CSAFPID-31707","CSAFPID-31708","CSAFPID-31709","CSAFPID-31710","CSAFPID-31711","CSAFPID-31712","CSAFPID-31713"]}],"title":"CVE-2024-38502"},{"cve":"CVE-2024-5849","cwe":{"id":"CWE-79","name":"Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')"},"notes":[{"audience":"all","category":"description","text":"An unauthenticated remote attacker may use a reflected XSS vulnerability to obtain information from a user or reboot the affected device once.","title":"Vulnerability Description"}],"product_status":{"fixed":["CSAFPID-32001","CSAFPID-32002","CSAFPID-32003","CSAFPID-32004","CSAFPID-32005","CSAFPID-32006","CSAFPID-32101","CSAFPID-32102","CSAFPID-32103","CSAFPID-32104","CSAFPID-32105","CSAFPID-32106","CSAFPID-32201","CSAFPID-32202","CSAFPID-32203","CSAFPID-32301","CSAFPID-32302","CSAFPID-32303","CSAFPID-32401","CSAFPID-32402","CSAFPID-32403","CSAFPID-32501","CSAFPID-32502","CSAFPID-32503","CSAFPID-32504","CSAFPID-32505","CSAFPID-32506","CSAFPID-32601","CSAFPID-32602","CSAFPID-32603","CSAFPID-32604","CSAFPID-32605","CSAFPID-32606","CSAFPID-32701","CSAFPID-32702","CSAFPID-32703","CSAFPID-32704","CSAFPID-32705","CSAFPID-32706","CSAFPID-32707","CSAFPID-32708","CSAFPID-32709","CSAFPID-32710","CSAFPID-32711","CSAFPID-32712","CSAFPID-32713"],"known_affected":["CSAFPID-31001","CSAFPID-31002","CSAFPID-31003","CSAFPID-31004","CSAFPID-31005","CSAFPID-31006","CSAFPID-31101","CSAFPID-31102","CSAFPID-31103","CSAFPID-31104","CSAFPID-31105","CSAFPID-31106","CSAFPID-31201","CSAFPID-31202","CSAFPID-31203","CSAFPID-31301","CSAFPID-31302","CSAFPID-31303","CSAFPID-31401","CSAFPID-31402","CSAFPID-31403","CSAFPID-31501","CSAFPID-31502","CSAFPID-31503","CSAFPID-31504","CSAFPID-31505","CSAFPID-31506","CSAFPID-31601","CSAFPID-31602","CSAFPID-31603","CSAFPID-31604","CSAFPID-31605","CSAFPID-31606","CSAFPID-31701","CSAFPID-31702","CSAFPID-31703","CSAFPID-31704","CSAFPID-31705","CSAFPID-31706","CSAFPID-31707","CSAFPID-31708","CSAFPID-31709","CSAFPID-31710","CSAFPID-31711","CSAFPID-31712","CSAFPID-31713"]},"remediations":[{"category":"vendor_fix","details":"Update to a new version of the firmware you are using:\n * SocketServer v11.66\n * PROFINET v3.4.10\n * PROFINET/Modbus v1.0.8\n * EtherNet/IP v7.23\n * EIP/Modbus v1.09\n * Modbus Router v7.10\n * Modbus Server v7.12\n * Modbus TCP v7.12","group_ids":["CSAFGID-0001"]}],"scores":[{"cvss_v3":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"LOW","baseScore":7.1,"baseSeverity":"HIGH","confidentialityImpact":"LOW","environmentalScore":7.1,"environmentalSeverity":"HIGH","integrityImpact":"LOW","privilegesRequired":"NONE","scope":"CHANGED","temporalScore":7.1,"temporalSeverity":"HIGH","userInteraction":"REQUIRED","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L","version":"3.1"},"products":["CSAFPID-31001","CSAFPID-31002","CSAFPID-31003","CSAFPID-31004","CSAFPID-31005","CSAFPID-31006","CSAFPID-31101","CSAFPID-31102","CSAFPID-31103","CSAFPID-31104","CSAFPID-31105","CSAFPID-31106","CSAFPID-31201","CSAFPID-31202","CSAFPID-31203","CSAFPID-31301","CSAFPID-31302","CSAFPID-31303","CSAFPID-31401","CSAFPID-31402","CSAFPID-31403","CSAFPID-31501","CSAFPID-31502","CSAFPID-31503","CSAFPID-31504","CSAFPID-31505","CSAFPID-31506","CSAFPID-31601","CSAFPID-31602","CSAFPID-31603","CSAFPID-31604","CSAFPID-31605","CSAFPID-31606","CSAFPID-31701","CSAFPID-31702","CSAFPID-31703","CSAFPID-31704","CSAFPID-31705","CSAFPID-31706","CSAFPID-31707","CSAFPID-31708","CSAFPID-31709","CSAFPID-31710","CSAFPID-31711","CSAFPID-31712","CSAFPID-31713"]}],"title":"CVE-2024-5849"},{"cve":"CVE-2024-38501","cwe":{"id":"CWE-79","name":"Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')"},"notes":[{"audience":"all","category":"description","text":"An unauthenticated remote attacker may use a HTML injection vulnerability with limited length to inject malicious HTML code and gain low-privileged access on the affected device.","title":"Vulnerability Description"}],"product_status":{"fixed":["CSAFPID-32001","CSAFPID-32002","CSAFPID-32003","CSAFPID-32004","CSAFPID-32005","CSAFPID-32006","CSAFPID-32101","CSAFPID-32102","CSAFPID-32103","CSAFPID-32104","CSAFPID-32105","CSAFPID-32106","CSAFPID-32201","CSAFPID-32202","CSAFPID-32203","CSAFPID-32301","CSAFPID-32302","CSAFPID-32303","CSAFPID-32401","CSAFPID-32402","CSAFPID-32403","CSAFPID-32501","CSAFPID-32502","CSAFPID-32503","CSAFPID-32504","CSAFPID-32505","CSAFPID-32506","CSAFPID-32601","CSAFPID-32602","CSAFPID-32603","CSAFPID-32604","CSAFPID-32605","CSAFPID-32606","CSAFPID-32701","CSAFPID-32702","CSAFPID-32703","CSAFPID-32704","CSAFPID-32705","CSAFPID-32706","CSAFPID-32707","CSAFPID-32708","CSAFPID-32709","CSAFPID-32710","CSAFPID-32711","CSAFPID-32712","CSAFPID-32713"],"known_affected":["CSAFPID-31001","CSAFPID-31002","CSAFPID-31003","CSAFPID-31004","CSAFPID-31005","CSAFPID-31006","CSAFPID-31101","CSAFPID-31102","CSAFPID-31103","CSAFPID-31104","CSAFPID-31105","CSAFPID-31106","CSAFPID-31201","CSAFPID-31202","CSAFPID-31203","CSAFPID-31301","CSAFPID-31302","CSAFPID-31303","CSAFPID-31401","CSAFPID-31402","CSAFPID-31403","CSAFPID-31501","CSAFPID-31502","CSAFPID-31503","CSAFPID-31504","CSAFPID-31505","CSAFPID-31506","CSAFPID-31601","CSAFPID-31602","CSAFPID-31603","CSAFPID-31604","CSAFPID-31605","CSAFPID-31606","CSAFPID-31701","CSAFPID-31702","CSAFPID-31703","CSAFPID-31704","CSAFPID-31705","CSAFPID-31706","CSAFPID-31707","CSAFPID-31708","CSAFPID-31709","CSAFPID-31710","CSAFPID-31711","CSAFPID-31712","CSAFPID-31713"]},"remediations":[{"category":"vendor_fix","details":"Update to a new version of the firmware you are using:\n * SocketServer v11.66\n * PROFINET v3.4.10\n * PROFINET/Modbus v1.0.8\n * EtherNet/IP v7.23\n * EIP/Modbus v1.09\n * Modbus Router v7.10\n * Modbus Server v7.12\n * Modbus TCP v7.12","group_ids":["CSAFGID-0001"]}],"scores":[{"cvss_v3":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"NONE","baseScore":6.1,"baseSeverity":"MEDIUM","confidentialityImpact":"LOW","environmentalScore":6.1,"environmentalSeverity":"MEDIUM","integrityImpact":"LOW","privilegesRequired":"NONE","scope":"CHANGED","temporalScore":6.1,"temporalSeverity":"MEDIUM","userInteraction":"REQUIRED","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","version":"3.1"},"products":["CSAFPID-31001","CSAFPID-31002","CSAFPID-31003","CSAFPID-31004","CSAFPID-31005","CSAFPID-31006","CSAFPID-31101","CSAFPID-31102","CSAFPID-31103","CSAFPID-31104","CSAFPID-31105","CSAFPID-31106","CSAFPID-31201","CSAFPID-31202","CSAFPID-31203","CSAFPID-31301","CSAFPID-31302","CSAFPID-31303","CSAFPID-31401","CSAFPID-31402","CSAFPID-31403","CSAFPID-31501","CSAFPID-31502","CSAFPID-31503","CSAFPID-31504","CSAFPID-31505","CSAFPID-31506","CSAFPID-31601","CSAFPID-31602","CSAFPID-31603","CSAFPID-31604","CSAFPID-31605","CSAFPID-31606","CSAFPID-31701","CSAFPID-31702","CSAFPID-31703","CSAFPID-31704","CSAFPID-31705","CSAFPID-31706","CSAFPID-31707","CSAFPID-31708","CSAFPID-31709","CSAFPID-31710","CSAFPID-31711","CSAFPID-31712","CSAFPID-31713"]}],"title":"CVE-2024-38501"}]}