CVSS 3.1
6.1 mediumCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:NCVE-2024-38501
Medium (6.1) in pepperl-fuchs. EPSS 0.3% chance of exploitation in the next 30 days.
An unauthenticated remote attacker may use a HTML injection vulnerability with limited length to inject malicious HTML code and gain low-privileged access on the affected device.
Severity
- EPSS
- 0.3% chance of exploitation in the next 30 days; higher than 26% of CVEs (scores of 2026-10-31)
- CWE
- CWE-79
- Published
- Modified
- Record from
- the NVD, synced
Affected
- pepperl-fuchs:eip\/modbus_firmware
- pepperl-fuchs:ethernet\/ip_firmware
- pepperl-fuchs:icdm-rx\/tcp_socketserver_firmware
- pepperl-fuchs:modbus_router_firmware
- pepperl-fuchs:modbus_server_firmware
- pepperl-fuchs:modbus_tcp_firmware
- pepperl-fuchs:profinet\/modbus_firmware
- pepperl-fuchs:profinet_firmware