Skip to content
Sign in
6.1 Medium

CVE-2025-1985 Due to improper neutralization of input during web page generation (XSS) an unauthenticated remote attacker can inject…

Description

Due to improper neutralization of input during web page generation (XSS) an unauthenticated remote attacker can inject HTML code into the Web-UI in the affected device.

Affected products and versions

Product Affected versions Fixed in
Profinet Gateway FB8122A.1.EL 1.3 earliest → < 1.3.13 1.3.13
Profinet Gateway LB8122A.1.EL 1.3 earliest → < 1.3.13 1.3.13

Other CVEs of Profinet Gateway FB8122A.1.EL

The 3 CVEs of Profinet Gateway FB8122A.1.EL →
CVE-2025-41655 An unauthenticated remote attacker can access a URL which causes the device to reboot 7.5 High CVE-2025-41654 An unauthenticated remote attacker can access information about running processes via the SNMP protocol 8.2 High
Track this CVE