Pepperl+Fuchs Comtrol IO-Link Master in Version 1.5.48 and below is prone to a Cross-Site Request Forgery (CSRF) in the web interface.
AI analysis not yet available
Plain-English explanation, risk summary, and remediation steps will appear here once AI analysis is complete.
No Fix Known
No patch has been released yet. Apply workarounds or mitigations where available.
| Vendor | Product | Versions | Fixed In |
|---|---|---|---|
| pepperl-fuchs | io-link_master_4-eip_firmware | 1.5.48 | - |
| pepperl-fuchs | io-link_master_8-eip_firmware | 1.5.48 | - |
| pepperl-fuchs | io-link_master_8-eip-l_firmware |
Published
CVE disclosed publicly
Last Modified
Most recent update
Indexed to CVEInsight
Added to this platform
AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
12
Affected Products
2
References
pepperl-fuchs / io-link_master_4-eip_firmware
| 1.5.48 |
| - |
| pepperl-fuchs | io-link_master_dr-8-eip_firmware | 1.5.48 | - |
| pepperl-fuchs | io-link_master_dr-8-eip-p_firmware | 1.5.48 | - |
| pepperl-fuchs | io-link_master_dr-8-eip-t_firmware | 1.5.48 | - |
| pepperl-fuchs | io-link_master_4-pnio_firmware | 1.5.48 | - |
| pepperl-fuchs | io-link_master_8-pnio_firmware | 1.5.48 | - |
| pepperl-fuchs | io-link_master_8-pnio-l_firmware | 1.5.48 | - |
| pepperl-fuchs | io-link_master_dr-8-pnio_firmware | 1.5.48 | - |
| pepperl-fuchs | io-link_master_dr-8-pnio-p_firmware | 1.5.48 | - |
| pepperl-fuchs | io-link_master_dr-8-pnio-t_firmware | 1.5.48 | - |
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Exploitability
Impact