VDE-2025-002

PEPPERL+FUCHS: HMI – devices are affected by Windows RCE

view advisory published 2025-02-25

An unauthenticated attacker could repeatedly send IPv6 packets, that include specially crafted packets, to a Windows machine which could enable remote code execution.

describes (1)

Related CVEs.

ID	severity	EPSS	exploitable	published
CVE-2024-38063US	—	70.6% (99th)	Exploit	2024-08-13
Windows TCP/IP Remote Code Execution Vulnerability

references

External citations — patches, advisories, analysis.

VDE-2025-002self
VDE-2025-002: PEPPERL+FUCHS: HMI – devices are affected by Windows RCE - HTMLself
CERT@VDE Security Advisories for Pepperl+Fuchsexternal
Pepperl+Fuchs PSIRTexternal
VDE-2025-002: PEPPERL+FUCHS: HMI – devices are affected by Windows RCE - CSAFself

remediations (1)

Fixed
For the Native Windows Versions please install the '2024-08 Cumulative Update' from Microsoft.

scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.

Free scan