Pepperl+fuchs Profinet Gateway LB8122A.1.EL vulnerabilities

3 CVEs affecting Pepperl+fuchs Profinet Gateway LB8122A.1.EL, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2025-41655, published 2025-05-26.

More from Pepperl+fuchs.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2025-41655, published 2025-05-26. High severity, CVSS 7.5. EPSS: 0.5% chance of exploitation in the next 30 days. An unauthenticated remote attacker can access a URL which causes the device to reboot.
• CVE-2025-41654, published 2025-05-26. High severity, CVSS 8.2. EPSS: 0.4% chance of exploitation in the next 30 days. An unauthenticated remote attacker can access information about running processes via the SNMP protocol. The amount of returned data can trigger a reboot by the watchdog.
• CVE-2025-1985, published 2025-05-26. Medium severity, CVSS 6.1. EPSS: 0.3% chance of exploitation in the next 30 days. Due to improper neutralization of input during web page generation (XSS) an unauthenticated remote attacker can inject HTML code into the Web-UI in the affected device.