PEPPERL+FUCHS: Profinet Gateway LB8122A.1.EL – Device is affected by XSS vulnerability and information disclosure

A stored cross-site scripting vulnerability has been discovered in the profinet gateway LB8122A.1.EL. An attacker can write an HTML tag with up to 32 characters in the message field of a HART transmitter. The HTML tag is interpreted as HTML when the HART information is displayed in a webbrowser. If the HTML tag contains a link to a manipulated page, a user can be tricked into accessing this page.
Furthermore, an attacker can access information about running processes via the SNMP protocol. Sending such SNMP read commands can also trigger a reboot.

An unauthenticated attacker can use a stored HTML link in a HART transmitter to redirect a user to a manipulated website. From there, he can manipulate the user's device or environment.
An attacker can collect information via SNMP to launch attacks. Sending the read commands can trigger a reboot of the device.

The web server is switched off by default and can only be switched on via the gateway display. It is then active for 5 minutes and switches itself off again.
- Ensure that only authorized personnel have access to the gateway.
- Only use the gateway in an isolated network environment.

Please install the updated firmware V1.3.13.