Security Advisory catalog CVE-2026-27548
cve-program · CVE-2026-27548 Published
A low-privileged remote attacker can exploit a command injection vulnerability in the /index.php/ajax/get_iodd_port_info endpoint using user or operator credentials allowing execution of commands with root privileges on the device.
Read the publisher's advisory Affected versions, risk and source history
Overview Affected History Connections
cve-program · CVE-2026-27548 Published ICE2-8IOL1-G65L-V1D Vendor product
Publisher's version information Shown as published. These rules are not interpreted as NuGet package version ranges.
{
"defaultStatus": "unaffected",
"product": "ICE2-8IOL1-G65L-V1D",
"vendor": "Pepperl+Fuchs",
"versions": [
{
"lessThan": "1.7.4",
"status": "affected",
"version": "1.0.0",
"versionType": "semver"
}
]
} ICE2-8IOL-G65L-V1D Vendor product
Publisher's version information Shown as published. These rules are not interpreted as NuGet package version ranges.
{
"defaultStatus": "unaffected",
"product": "ICE2-8IOL-G65L-V1D",
"vendor": "Pepperl+Fuchs",
"versions": [
{
"lessThan": "1.7.4",
"status": "affected",
"version": "1.0.0",
"versionType": "semver"
}
]
} ICE2-8IOL-K45P-RJ45 Vendor product
Publisher's version information Shown as published. These rules are not interpreted as NuGet package version ranges.
{
"defaultStatus": "unaffected",
"product": "ICE2-8IOL-K45P-RJ45",
"vendor": "Pepperl+Fuchs",
"versions": [
{
"lessThan": "1.7.4",
"status": "affected",
"version": "1.0.0",
"versionType": "semver"
}
]
} ICE2-8IOL-K45S-RJ45 Vendor product
Publisher's version information Shown as published. These rules are not interpreted as NuGet package version ranges.
{
"defaultStatus": "unaffected",
"product": "ICE2-8IOL-K45S-RJ45",
"vendor": "Pepperl+Fuchs",
"versions": [
{
"lessThan": "1.7.4",
"status": "affected",
"version": "1.0.0",
"versionType": "semver"
}
]
} ICE3-8IOL1-G65L-V1D Vendor product
Publisher's version information Shown as published. These rules are not interpreted as NuGet package version ranges.
{
"defaultStatus": "unaffected",
"product": "ICE3-8IOL1-G65L-V1D",
"vendor": "Pepperl+Fuchs",
"versions": [
{
"lessThan": "1.7.4",
"status": "affected",
"version": "1.0.0",
"versionType": "semver"
}
]
} ICE3-8IOL-G65L-V1D Vendor product
Publisher's version information Shown as published. These rules are not interpreted as NuGet package version ranges.
{
"defaultStatus": "unaffected",
"product": "ICE3-8IOL-G65L-V1D",
"vendor": "Pepperl+Fuchs",
"versions": [
{
"lessThan": "1.7.4",
"status": "affected",
"version": "1.0.0",
"versionType": "semver"
}
]
} ICE3-8IOL-G65L-V1D-Y Vendor product
Publisher's version information Shown as published. These rules are not interpreted as NuGet package version ranges.
{
"defaultStatus": "unaffected",
"product": "ICE3-8IOL-G65L-V1D-Y",
"vendor": "Pepperl+Fuchs",
"versions": [
{
"lessThan": "1.7.4",
"status": "affected",
"version": "1.0.0",
"versionType": "semver"
}
]
} ICE3-8IOL-K45P-RJ45 Vendor product
Publisher's version information Shown as published. These rules are not interpreted as NuGet package version ranges.
{
"defaultStatus": "unaffected",
"product": "ICE3-8IOL-K45P-RJ45",
"vendor": "Pepperl+Fuchs",
"versions": [
{
"lessThan": "1.7.4",
"status": "affected",
"version": "1.0.0",
"versionType": "semver"
}
]
} ICE3-8IOL-K45S-RJ45 Vendor product
Publisher's version information Shown as published. These rules are not interpreted as NuGet package version ranges.
{
"defaultStatus": "unaffected",
"product": "ICE3-8IOL-K45S-RJ45",
"vendor": "Pepperl+Fuchs",
"versions": [
{
"lessThan": "1.7.4",
"status": "affected",
"version": "1.0.0",
"versionType": "semver"
}
]
} IOL MA8 PN DI8 Vendor product
Publisher's version information Shown as published. These rules are not interpreted as NuGet package version ranges.
{
"defaultStatus": "unaffected",
"product": "IOL MA8 PN DI8",
"vendor": "Phoenix Contact",
"versions": [
{
"lessThan": "1.7.4",
"status": "affected",
"version": "1.0.0",
"versionType": "semver"
}
]
} IOL MA8 EIP DI8 Vendor product
Publisher's version information Shown as published. These rules are not interpreted as NuGet package version ranges.
{
"defaultStatus": "unaffected",
"product": "IOL MA8 EIP DI8",
"vendor": "Phoenix Contact",
"versions": [
{
"lessThan": "1.7.4",
"status": "affected",
"version": "1.0.0",
"versionType": "semver"
}
]
} YL212CEI8M1IO Vendor product
Publisher's version information Shown as published. These rules are not interpreted as NuGet package version ranges.
{
"defaultStatus": "unaffected",
"product": "YL212CEI8M1IO",
"vendor": "Carlo Gavazzi Automation",
"versions": [
{
"lessThan": "1.7.4",
"status": "affected",
"version": "1.0.0",
"versionType": "semver"
}
]
} YN115CEI8RPIO Vendor product
Publisher's version information Shown as published. These rules are not interpreted as NuGet package version ranges.
{
"defaultStatus": "unaffected",
"product": "YN115CEI8RPIO",
"vendor": "Carlo Gavazzi Automation",
"versions": [
{
"lessThan": "1.7.4",
"status": "affected",
"version": "1.0.0",
"versionType": "semver"
}
]
} YL212CPN8M1IO Vendor product
Publisher's version information Shown as published. These rules are not interpreted as NuGet package version ranges.
{
"defaultStatus": "unaffected",
"product": "YL212CPN8M1IO",
"vendor": "Carlo Gavazzi Automation",
"versions": [
{
"lessThan": "1.7.4",
"status": "affected",
"version": "1.0.0",
"versionType": "semver"
}
]
} YN115CPN8RPIO Vendor product
Publisher's version information Shown as published. These rules are not interpreted as NuGet package version ranges.
{
"defaultStatus": "unaffected",
"product": "YN115CPN8RPIO",
"vendor": "Carlo Gavazzi Automation",
"versions": [
{
"lessThan": "1.7.4",
"status": "affected",
"version": "1.0.0",
"versionType": "semver"
}
]
} Original source record · Cite this exact observation · Complete original publisher JSON