HIGH🇵🇱 Wersja polska

CVE-2024-6421

CVSS 7.5v3.1pub. 2024-07-10upd. 2025-08-22

An unauthenticated remote attacker can read out sensitive device information through a incorrectly configured FTP service.

CVSS Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

  • Pepperl Fuchs Oit1500 F113 B12 Cb

    HW
    Pepperl-Fuchs
    all versions

  • Pepperl Fuchs Oit1500 F113 B12 Cb Firmware

    OS
    Pepperl-Fuchs
    ≤ 2.11.0

  • Pepperl Fuchs Oit200 F113 B12 Cb

    HW
    Pepperl-Fuchs
    all versions

  • Pepperl Fuchs Oit200 F113 B12 Cb Firmware

    OS
    Pepperl-Fuchs
    ≤ 2.11.0

  • Pepperl Fuchs Oit500 F113 B12 Cb

    HW
    Pepperl-Fuchs
    all versions

  • Pepperl Fuchs Oit500 F113 B12 Cb Firmware

    OS
    Pepperl-Fuchs
    ≤ 2.11.0

  • Pepperl Fuchs Oit700 F113 B12 Cb

    HW
    Pepperl-Fuchs
    all versions

  • Pepperl Fuchs Oit700 F113 B12 Cb Firmware

    OS
    Pepperl-Fuchs
    ≤ 2.11.0
🔵
CHECK WITH VENDOR
No clear patch data available. Check vendor references.
CWE
References

Related vulnerabilities

CVE-2024-6422CRITICAL9.8PL ✓same product

Brak uwierzytelnienia w Telnet — zdalne przejęcie urządzeń Pepperl-Fuchs OIT

CVE-2021-34565CRITICAL9.8PL ✓same vendor

Zakodowane na stałe poświadczenia w usługach SSH i telnet bramki WirelessHART

CVE-2020-12500CRITICAL9.8PL ✓same vendor

Brak uwierzytelnienia w zarządzaniu urządzeniami Pepperl+Fuchs RocketLinx

CVE-2020-12501CRITICAL9.8PL ✓same vendor

Ukryte konta backdoor w przełącznikach Pepperl+Fuchs RocketLinx

CVE-2020-12504CRITICAL9.8PL ✓same vendor

Niezabezpieczony serwis TFTP w przełącznikach Pepperl+Fuchs RocketLinx