CVE-2024-6422: Pepperl+Fuchs: OIT Products can be manipulated via unintended Telnet access
Published Jul 10, 2024
·Updated
An unauthenticated remote attacker can manipulate the device via Telnet, stop processes, read, delete and change data.
Affected Software
8 affected components
All of the following
Pepperl-fuchs Oit700-f113-b12-cb Firmware<=2.11.0
Pepperl-fuchs Oit700-f113-b12-cb
All of the following
Pepperl-fuchs Oit500-f113-b12-cb Firmware<=2.11.0
Pepperl-fuchs Oit500-f113-b12-cb
All of the following
Pepperl-fuchs Oit200-f113-b12-cb Firmware<=2.11.0
Pepperl-fuchs Oit200-f113-b12-cb
All of the following
Pepperl-fuchs Oit1500-f113-b12-cb Firmware<=2.11.0
Pepperl-fuchs Oit1500-f113-b12-cb
Event History
Jul 10, 2024
CVE Published
via MITRE·07:37 AM
Data Sourced
via MITRE·07:37 AM
DescriptionSeverityWeakness
Data Sourced
via NVD·08:15 AM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2024-6422?
CVE-2024-6422 is classified as a critical vulnerability due to its potential for unauthenticated remote exploitation.
2
How do I fix CVE-2024-6422?
To fix CVE-2024-6422, update the affected Pepperl+Fuchs OIT firmware to version 2.12.0 or higher.
3
Which software is affected by CVE-2024-6422?
CVE-2024-6422 affects multiple Pepperl+Fuchs firmware versions up to 2.11.0 for OIT700, OIT500, OIT200, and OIT1500 models.
4
Can CVE-2024-6422 be exploited remotely?
Yes, CVE-2024-6422 can be exploited remotely without authentication through the Telnet interface.
5
What types of attacks can be performed using CVE-2024-6422?
An attacker can stop processes, read, delete, or modify data on the affected devices using CVE-2024-6422.