Veille CVE
CVE-2026-27552
8.1 ÉlevéeDescription
A low-privileged remote attacker can exploit improper authorization in the /index.php/attached_devices_tab/do_upload endpoint to upload IODD files to the device, potentially altering device behavior or causing system crashes.
Produits concernés
- Pepperl+Fuchs ICE2-8IOL1-G65L-V1D
- Pepperl+Fuchs ICE2-8IOL-G65L-V1D
- Pepperl+Fuchs ICE2-8IOL-K45P-RJ45
- Pepperl+Fuchs ICE2-8IOL-K45S-RJ45
- Pepperl+Fuchs ICE3-8IOL1-G65L-V1D
- Pepperl+Fuchs ICE3-8IOL-G65L-V1D
- Pepperl+Fuchs ICE3-8IOL-G65L-V1D-Y
- Pepperl+Fuchs ICE3-8IOL-K45P-RJ45
- Pepperl+Fuchs ICE3-8IOL-K45S-RJ45
- Phoenix Contact IOL MA8 PN DI8
- Phoenix Contact IOL MA8 EIP DI8
- Carlo Gavazzi Automation YL212CEI8M1IO
- Carlo Gavazzi Automation YN115CEI8RPIO
- Carlo Gavazzi Automation YL212CPN8M1IO
- Carlo Gavazzi Automation YN115CPN8RPIO
Scores CVSS
| Version | Score | Source | Vecteur |
|---|---|---|---|
| 3.1 | 8.1 Élevée | info@cert.vde.com | CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H |