CVE-2024-38501: An unauthenticated remote attacker may use a HTML injection vulnerability with limited length to inject malici
28
Routine
MEDIUM 6.1UPGRADEUPGRADEUPGRADE
CVE-2024-38501 is a medium-severity flaw (CVSS 6.1) affecting icdm-rx\/tcp socketserver firmware, profinet firmware, profinet\/modbus firmware. Below: why it ranks where it does, which versions are affected, what to do, and the exact commands.
An unauthenticated remote attacker may use a HTML injection vulnerability with limited length to inject malicious HTML code and gain low-privileged access on the affected device.
Install the latest cumulative update from Windows Update
If no patch exists yet
OS downgrades are not safe. Apply the vendor mitigation from the advisory and restrict exposure.
pepperl-fuchs profinet firmware UPGRADE
Affected: < 3.4.9
Fixed in: 3.4.9
Safe to downgrade to: no unaffected older release
Check your OS release
cat /etc/os-release; uname -r
Debian / Ubuntu
sudo apt update && sudo apt full-upgrade
RHEL / Amazon Linux / Fedora
sudo dnf upgrade --refresh
Windows
Install the latest cumulative update from Windows Update
If no patch exists yet
OS downgrades are not safe. Apply the vendor mitigation from the advisory and restrict exposure.
pepperl-fuchs profinet\/modbus firmware UPGRADE
Affected: < 1.0.7
Fixed in: 1.0.7
Safe to downgrade to: no unaffected older release
Check your OS release
cat /etc/os-release; uname -r
Debian / Ubuntu
sudo apt update && sudo apt full-upgrade
RHEL / Amazon Linux / Fedora
sudo dnf upgrade --refresh
Windows
Install the latest cumulative update from Windows Update
If no patch exists yet
OS downgrades are not safe. Apply the vendor mitigation from the advisory and restrict exposure.
pepperl-fuchs modbus router firmware UPGRADE
Affected: < 7.09
Fixed in: 7.09
Safe to downgrade to: no unaffected older release
Check your OS release
cat /etc/os-release; uname -r
Debian / Ubuntu
sudo apt update && sudo apt full-upgrade
RHEL / Amazon Linux / Fedora
sudo dnf upgrade --refresh
Windows
Install the latest cumulative update from Windows Update
If no patch exists yet
OS downgrades are not safe. Apply the vendor mitigation from the advisory and restrict exposure.
pepperl-fuchs modbus server firmware UPGRADE
Affected: < 7.11
Fixed in: 7.11
Safe to downgrade to: no unaffected older release
Check your OS release
cat /etc/os-release; uname -r
Debian / Ubuntu
sudo apt update && sudo apt full-upgrade
RHEL / Amazon Linux / Fedora
sudo dnf upgrade --refresh
Windows
Install the latest cumulative update from Windows Update
If no patch exists yet
OS downgrades are not safe. Apply the vendor mitigation from the advisory and restrict exposure.
pepperl-fuchs modbus tcp firmware UPGRADE
Affected: < 7.11
Fixed in: 7.11
Safe to downgrade to: no unaffected older release
Check your OS release
cat /etc/os-release; uname -r
Debian / Ubuntu
sudo apt update && sudo apt full-upgrade
RHEL / Amazon Linux / Fedora
sudo dnf upgrade --refresh
Windows
Install the latest cumulative update from Windows Update
If no patch exists yet
OS downgrades are not safe. Apply the vendor mitigation from the advisory and restrict exposure.
Verify at the official sourceNVD · CVE Program · Report a problem with this page Scores and fixes here are computed automatically from those and other public sources. Confirm with the vendor advisory before changing production systems.
Quick answers
How do I fix CVE-2024-38501?
icdm-rx\/tcp socketserver firmware: upgrade to 11.65; profinet firmware: upgrade to 3.4.9; profinet\/modbus firmware: upgrade to 1.0.7. Exact commands for each OS are on this page.
Is CVE-2024-38501 being exploited?
CVE-2024-38501 is not on the CISA Known Exploited Vulnerabilities list at the time of the last update. Check again, as this can change.
What does CVE-2024-38501 affect?
CVE-2024-38501 affects icdm-rx\/tcp socketserver firmware, profinet firmware, profinet\/modbus firmware. Severity is medium (CVSS 6.1). An unauthenticated remote attacker may use a HTML injection vulnerability with limited length to inject malicious HTML code and gain low-privileged access on the affected device.
How urgent is CVE-2024-38501?
Priority 28/100. No elevated risk signals yet.
Related CVEs
CVE-2024-5849HIGH 7.1UPGRADEUPGRADE An unauthenticated remote attacker may use a reflected XSS vulnerability to obtain information from a user or
CVE-2024-38502HIGH 7.1UPGRADEUPGRADE An unauthenticated remote attacker may use stored XSS vulnerability to obtain information from a user or reboo
PatchTheCVE