Pepperl-fuchs Modbus Server Firmware — known CVE vulnerabilities

Every CVE whose affected-product data names Pepperl-fuchs Modbus Server Firmware, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (3)

• CVE-2024-38502 — CVSS 7.1 (high): An unauthenticated remote attacker may use stored XSS vulnerability to obtain information from a user or reboot the affected device once.
• CVE-2024-5849 — CVSS 7.1 (high): An unauthenticated remote attacker may use a reflected XSS vulnerability to obtain information from a user or reboot the affected device…
• CVE-2024-38501 — CVSS 6.1 (medium): An unauthenticated remote attacker may use a HTML injection vulnerability with limited length to inject malicious HTML code and gain…