CVE-2025-1985 — PEPPERL+FUCHS: Profinet Gateway LB8122A.1.EL – Device is affected by XSS vulnerability
Due to improper neutralization of input during web page generation (XSS) an unauthenticated remote attacker can inject HTML code into the Web-UI in the affected device.
Published: 2025-05-26 · CVSS: 6.1 · CVSS 3.1
Due to improper neutralization of input during web page generation (XSS) an unauthenticated remote attacker can inject HTML code into the Web-UI in the affected device.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7