An unauthenticated remote attacker can read out sensitive device information through a incorrectly configured FTP service.
CVSS Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:NPepperl Fuchs Oit1500 F113 B12 Cb
HWPepperl-Fuchswszystkie wersjePepperl Fuchs Oit1500 F113 B12 Cb Firmware
OSPepperl-Fuchs≤ 2.11.0Pepperl Fuchs Oit200 F113 B12 Cb
HWPepperl-Fuchswszystkie wersjePepperl Fuchs Oit200 F113 B12 Cb Firmware
OSPepperl-Fuchs≤ 2.11.0Pepperl Fuchs Oit500 F113 B12 Cb
HWPepperl-Fuchswszystkie wersjePepperl Fuchs Oit500 F113 B12 Cb Firmware
OSPepperl-Fuchs≤ 2.11.0Pepperl Fuchs Oit700 F113 B12 Cb
HWPepperl-Fuchswszystkie wersjePepperl Fuchs Oit700 F113 B12 Cb Firmware
OSPepperl-Fuchs≤ 2.11.0
🔵
CHECK WITH VENDOR
No clear patch data available. Check vendor references.
Related vulnerabilities
CVE-2024-6422CRITICAL9.8PL ✓ten sam produkt
Brak uwierzytelnienia w Telnet — zdalne przejęcie urządzeń Pepperl-Fuchs OIT
CVE-2021-34565CRITICAL9.8ten sam vendor
In PEPPERL+FUCHS WirelessHART-Gateway 3.0.7 to 3.0.9 the SSH and telnet services are active with hard-coded cr...
CVE-2020-12500CRITICAL9.8ten sam vendor
Improper Authorization vulnerability of Pepperl+Fuchs P+F Comtrol RocketLinx ES7510-XT, ES8509-XT, ES8510-XT, ...
CVE-2020-12501CRITICAL9.8ten sam vendor
Improper Authorization vulnerability of Pepperl+Fuchs P+F Comtrol RocketLinx ES7510-XT, ES8509-XT, ES8510-XT, ...
CVE-2020-12504CRITICAL9.8ten sam vendor
Improper Authorization vulnerability of Pepperl+Fuchs P+F Comtrol RocketLinx ES7510-XT, ES8509-XT, ES8510-XT, ...