PT-2024-37190 · Pepperl+Fuchs · Icdm-Rx/En-2Db9/Rj45-Din+51

Christopher Di-Nozzi · Published 2024-08-13 · Updated 2024-08-22 · CVE-2024-5849

Positive Technologies (AI Summary)

CVSS v3.1

7.1

High

Base vector

AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided descriptions.

Description: An unauthenticated remote attacker may use a reflected XSS vulnerability to obtain information from a user or reboot the affected device once. This issue allows attackers to exploit the vulnerability without needing authentication, potentially leading to information disclosure or device reboot.

Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.

XSS

Weakness Enumeration

CWE-79

Related Identifiers

CVE-2024-5849

Affected Products

Icdm-Rx/En-2Db9/Rj45-Din

Icdm-Rx/En-2St/Rj45-Din

Icdm-Rx/En-4Db9/2Rj45-Din

Icdm-Rx/En-Db9/Rj45-Din

Icdm-Rx/En-Db9/Rj45-Pm

Icdm-Rx/En-St/Rj45-Din

Icdm-Rx/En1-2Db9/Rj45-Din

Icdm-Rx/En1-2St/Rj45-Din

Icdm-Rx/En1-4Db9/2Rj45-Din

Icdm-Rx/En1-Db9/Rj45-Din

Icdm-Rx/En1-Db9/Rj45-Pm

Icdm-Rx/En1-St/Rj45-Din

Icdm-Rx/Mod-16Rj45/2Rj45-Pm

Icdm-Rx/Mod-2Db9/Rj45-Din

Icdm-Rx/Mod-2St/Rj45-Din

Icdm-Rx/Mod-4Db9/2Rj45-Din

Icdm-Rx/Mod-Db9/Rj45-Din

Icdm-Rx/Mod-Db9/Rj45-Pm

Icdm-Rx/Mod-St/Rj45-Din

Icdm-Rx/Pn-2Db9/Rj45-Din

Icdm-Rx/Pn-2St/Rj45-Din

Icdm-Rx/Pn-4Db9/2Rj45-Din

Icdm-Rx/Pn-Db9/Rj45-Din

Icdm-Rx/Pn-Db9/Rj45-Pm

Icdm-Rx/Pn-St/Rj45-Din

Icdm-Rx/Pn1-2Db9/Rj45-Din

Icdm-Rx/Pn1-2St/Rj45-Din

Icdm-Rx/Pn1-4Db9/2Rj45-Din

Icdm-Rx/Pn1-Db9/Rj45-Din

Icdm-Rx/Pn1-Db9/Rj45-Pm

Icdm-Rx/Pn1-St/Rj45-Din

Icdm-Rx/Tcp-16Db9/Rj45-Rm

Icdm-Rx/Tcp-16Rj45/2Rj45-Pm

Icdm-Rx/Tcp-16Rj45/Rj45-Rm

Icdm-Rx/Tcp-2Db9/Rj45-Din

Icdm-Rx/Tcp-2St/Rj45-Din

Icdm-Rx/Tcp-32Rj45/Rj45-Rm

Icdm-Rx/Tcp-4Db9/2Rj45-Din

Icdm-Rx/Tcp-4Db9/2Rj45-Pm

Icdm-Rx/Tcp-8Db9/2Rj45-Pm

Icdm-Rx/Tcp-Db9/Rj45-Din

Icdm-Rx/Tcp-Db9/Rj45-Pm

Icdm-Rx/Tcp-Db9/Rj45-Pm2

Icdm-Rx/Tcp-St/Rj45-Din

Eip/Modbus Firmware

Ethernet/Ip Firmware

Icdm-Rx/Tcp Socketserver Firmware

Modbus Router Firmware

Modbus Server Firmware

Modbus Tcp Firmware

Profinet/Modbus Firmware

Profinet Firmware

References · 8

• https://nvd.nist.gov/vuln/detail/CVE-2024-5849 · Security Note
• https://osv.dev/vulnerability/CVE-2024-5849 · Vendor Advisory
• https://twitter.com/CVEnew/status/1823342946617376825 · Twitter Post
• https://t.me/cvedetector/3015 · Telegram Post
• https://t.me/cvenotify/90294 · Telegram Post
• https://twitter.com/PorsilapongoCl/status/1823343975945642245 · Twitter Post
• https://twitter.com/cracbot/status/1825050090622562675 · Twitter Post
• https://cert.vde.com/en/advisories/VDE-2024-033 · Note