Veille CVE

Recherche « Pepperl+Fuchs ICE3-8IOL-K45P-RJ45 »

20 CVE

Critique 2 Élevée 17 Moyenne 1 Faible 0 Non évaluée 0 Exploitées (KEV) Tri : plus récentes « Pepperl+Fuchs ICE3-8IOL-K45P-RJ45 » ✕
  1. CVE-2026-27565 9.8 Critique

    Pepperl+Fuchs ICE2-8IOL1-G65L-V1D · Pepperl+Fuchs ICE2-8IOL-G65L-V1D · Pepperl+Fuchs ICE2-8IOL-K45P-RJ45 · Pepperl+Fuchs ICE2-8IOL-K45S-RJ45

    An unauthenticated remote attacker can upload a malicious IODD file that places and executes a shell script with root privileges. The shell script remains active even after a reboot.

  2. CVE-2026-27564 7.2 Élevée

    Pepperl+Fuchs ICE2-8IOL1-G65L-V1D · Pepperl+Fuchs ICE2-8IOL-G65L-V1D · Pepperl+Fuchs ICE2-8IOL-K45P-RJ45 · Pepperl+Fuchs ICE2-8IOL-K45S-RJ45

    A high-privileged remote attacker can exploit a command injection vulnerability in the /api/datastorage/data endpoint by sending a PUT request with admin credentials allowing execution of commands with root privileges on the device.

  3. CVE-2026-27563 7.2 Élevée

    Pepperl+Fuchs ICE2-8IOL1-G65L-V1D · Pepperl+Fuchs ICE2-8IOL-G65L-V1D · Pepperl+Fuchs ICE2-8IOL-K45P-RJ45 · Pepperl+Fuchs ICE2-8IOL-K45S-RJ45

    A high-privileged remote attacker can exploit a command injection vulnerability in the /api/datastorage/data endpoint by sending a crafted GET request with admin credentials allowing execution of commands with root privileges on the device.

  4. CVE-2026-27562 7.2 Élevée

    Pepperl+Fuchs ICE2-8IOL1-G65L-V1D · Pepperl+Fuchs ICE2-8IOL-G65L-V1D · Pepperl+Fuchs ICE2-8IOL-K45P-RJ45 · Pepperl+Fuchs ICE2-8IOL-K45S-RJ45

    A high-privileged remote attacker can exploit a command injection vulnerability in the /api/iodd/config endpoint by sending a crafted PUT request with admin credentials allowing execution of commands with root privileges on the device.

  5. CVE-2026-27561 7.2 Élevée

    Pepperl+Fuchs ICE2-8IOL1-G65L-V1D · Pepperl+Fuchs ICE2-8IOL-G65L-V1D · Pepperl+Fuchs ICE2-8IOL-K45P-RJ45 · Pepperl+Fuchs ICE2-8IOL-K45S-RJ45

    A high-privileged remote attacker can exploit a command injection vulnerability in the /api/iodd/config endpoint by sending a crafted GET request with admin credentials allowing execution of commands with root privileges on the device.

  6. CVE-2026-27560 7.2 Élevée

    Pepperl+Fuchs ICE2-8IOL1-G65L-V1D · Pepperl+Fuchs ICE2-8IOL-G65L-V1D · Pepperl+Fuchs ICE2-8IOL-K45P-RJ45 · Pepperl+Fuchs ICE2-8IOL-K45S-RJ45

    A high-privileged remote attacker can exploit a command injection vulnerability in the /api/status/data endpoint by sending a crafted DELETE request with admin credentials allowing execution of commands with root privileges on the device.

  7. CVE-2026-27559 8.8 Élevée

    Pepperl+Fuchs ICE2-8IOL1-G65L-V1D · Pepperl+Fuchs ICE2-8IOL-G65L-V1D · Pepperl+Fuchs ICE2-8IOL-K45P-RJ45 · Pepperl+Fuchs ICE2-8IOL-K45S-RJ45

    A low-privileged remote attacker can exploit a command injection vulnerability in the /api/status/data endpoint by sending a crafted GET request with user credentials allowing execution of commands with root privileges on the device.

  8. CVE-2026-27558 8.8 Élevée

    Pepperl+Fuchs ICE2-8IOL1-G65L-V1D · Pepperl+Fuchs ICE2-8IOL-G65L-V1D · Pepperl+Fuchs ICE2-8IOL-K45P-RJ45 · Pepperl+Fuchs ICE2-8IOL-K45S-RJ45

    A low-privileged remote attacker can exploit a command injection vulnerability in the /index.php/attached_devices_tab/ajax_remove_uploaded_iodd_files endpoint using operator credentials allowing execution of commands with root privileges on the device.

  9. CVE-2026-27557 7.5 Élevée

    Pepperl+Fuchs ICE2-8IOL1-G65L-V1D · Pepperl+Fuchs ICE2-8IOL-G65L-V1D · Pepperl+Fuchs ICE2-8IOL-K45P-RJ45 · Pepperl+Fuchs ICE2-8IOL-K45S-RJ45

    An unauthenticated remote attacker can exploit a path traversal vulnerability in the /index.php/view_uploaded_iodd_file endpoint allowing the SSH server's private keys to be read.

  10. CVE-2026-27556 8.8 Élevée

    Pepperl+Fuchs ICE2-8IOL1-G65L-V1D · Pepperl+Fuchs ICE2-8IOL-G65L-V1D · Pepperl+Fuchs ICE2-8IOL-K45P-RJ45 · Pepperl+Fuchs ICE2-8IOL-K45S-RJ45

    A low-privileged remote attacker can exploit a local file inclusion vulnerability in the /index.php/ajax/save_iodd_parameters endpoint using a valid operator cookie allowing execution of arbitrary PHP code on the device.

  11. CVE-2026-27555 8.8 Élevée

    Pepperl+Fuchs ICE2-8IOL1-G65L-V1D · Pepperl+Fuchs ICE2-8IOL-G65L-V1D · Pepperl+Fuchs ICE2-8IOL-K45P-RJ45 · Pepperl+Fuchs ICE2-8IOL-K45S-RJ45

    A low-privileged remote attacker can exploit a local file inclusion vulnerability in the /index.php/ajax/get_iodd_port_info endpoint using a valid user cookie allowing execution of arbitrary PHP code on the device.

  12. CVE-2026-27554 8.8 Élevée

    Pepperl+Fuchs ICE2-8IOL1-G65L-V1D · Pepperl+Fuchs ICE2-8IOL-G65L-V1D · Pepperl+Fuchs ICE2-8IOL-K45P-RJ45 · Pepperl+Fuchs ICE2-8IOL-K45S-RJ45

    A low-privileged remote attacker can exploit a command injection vulnerability in the /index.php/ajax/save_iodd_parameters endpoint using operator credentials allowing execution of commands with root privileges on the device.

  13. CVE-2026-27553 6.5 Moyenne

    Pepperl+Fuchs ICE2-8IOL1-G65L-V1D · Pepperl+Fuchs ICE2-8IOL-G65L-V1D · Pepperl+Fuchs ICE2-8IOL-K45P-RJ45 · Pepperl+Fuchs ICE2-8IOL-K45S-RJ45

    A low-privileged remote attacker can manipulate the schema path parameter in the /index.php/diagnostics_tab/ajax_diag_table_rows endpoint using a valid user cookie allowing disclosure of all user password hashes.

  14. CVE-2026-27552 8.1 Élevée

    Pepperl+Fuchs ICE2-8IOL1-G65L-V1D · Pepperl+Fuchs ICE2-8IOL-G65L-V1D · Pepperl+Fuchs ICE2-8IOL-K45P-RJ45 · Pepperl+Fuchs ICE2-8IOL-K45S-RJ45

    A low-privileged remote attacker can exploit improper authorization in the /index.php/attached_devices_tab/do_upload endpoint to upload IODD files to the device, potentially altering device behavior or causing system crashes.

  15. CVE-2026-27551 8.8 Élevée

    Pepperl+Fuchs ICE2-8IOL1-G65L-V1D · Pepperl+Fuchs ICE2-8IOL-G65L-V1D · Pepperl+Fuchs ICE2-8IOL-K45P-RJ45 · Pepperl+Fuchs ICE2-8IOL-K45S-RJ45

    A low-privileged remote attacker can exploit a command injection vulnerability in the /index.php/ajax/parameterManage endpoint using user credentials allowing execution of commands with root privileges on the device.

  16. CVE-2026-27550 8.8 Élevée

    Pepperl+Fuchs ICE2-8IOL1-G65L-V1D · Pepperl+Fuchs ICE2-8IOL-G65L-V1D · Pepperl+Fuchs ICE2-8IOL-K45P-RJ45 · Pepperl+Fuchs ICE2-8IOL-K45S-RJ45

    A low-privileged remote attacker can exploit a command injection vulnerability in the Field_Shadow_Password class using operator credentials allowing execution of commands with root privileges on the device.

  17. CVE-2026-27549 8.8 Élevée

    Pepperl+Fuchs ICE2-8IOL1-G65L-V1D · Pepperl+Fuchs ICE2-8IOL-G65L-V1D · Pepperl+Fuchs ICE2-8IOL-K45P-RJ45 · Pepperl+Fuchs ICE2-8IOL-K45S-RJ45

    A low-privileged remote attacker can exploit a command injection vulnerability in the /index.php/attached_devices_tab/do_upload endpoint using operator credentials allowing execution of commands with root privileges on the device.

  18. CVE-2026-27548 8.8 Élevée

    Pepperl+Fuchs ICE2-8IOL1-G65L-V1D · Pepperl+Fuchs ICE2-8IOL-G65L-V1D · Pepperl+Fuchs ICE2-8IOL-K45P-RJ45 · Pepperl+Fuchs ICE2-8IOL-K45S-RJ45

    A low-privileged remote attacker can exploit a command injection vulnerability in the /index.php/ajax/get_iodd_port_info endpoint using user or operator credentials allowing execution of commands with root privileges on the device.

  19. CVE-2026-27547 8.8 Élevée

    Pepperl+Fuchs ICE2-8IOL1-G65L-V1D · Pepperl+Fuchs ICE2-8IOL-G65L-V1D · Pepperl+Fuchs ICE2-8IOL-K45P-RJ45 · Pepperl+Fuchs ICE2-8IOL-K45S-RJ45

    A low-privileged remote attacker can exploit a command injection vulnerability in the /index.php/ajax/get_iodd_menu_info endpoint using valid user or operator credentials allowing execution of commands with root privileges on the device.

  20. CVE-2026-27546 9.8 Critique

    Pepperl+Fuchs ICE2-8IOL1-G65L-V1D · Pepperl+Fuchs ICE2-8IOL-G65L-V1D · Pepperl+Fuchs ICE2-8IOL-K45P-RJ45 · Pepperl+Fuchs ICE2-8IOL-K45S-RJ45

    An unauthenticated remote attacker can exploit an authentication bypass in the _account_log function to log in as an admin, even when accounts are properly configured.