Skip to main content

IO-Link Masters CVE-2026-27564

| EUVDEUVD-2026-80247 HIGH
OS Command Injection (CWE-78)
2026-09-16 CERTVDE GHSA-cr25-g7wh-c7vg
Command Injection Ice2 8Iol1 G65L V1D Ice2 8Iol G65L V1D Ice2 8Iol K45P Rj45 Ice2 8Iol K45S Rj45 Ice3 8Iol1 G65L V1D Ice3 8Iol G65L V1D Ice3 8Iol G65L V1D Y Ice3 8Iol K45P Rj45 Ice3 8Iol K45S Rj45 Iol Ma8 Pn Di8 Iol Ma8 Eip Di8 Yl212Cei8M1Io Yn115Cei8Rpio Yl212Cpn8M1Io Yn115Cpn8Rpio
7.2
CVSS 3.1 · NVD
Share

Severity by source

Vendor (CERTVDE) PRIMARY
HIGH
qualitative
NVD
7.2 HIGH
AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
vuln.today AI
7.2 HIGH

Network-accessible REST API requires admin credentials (PR:H); no complexity beyond authentication; root-level command execution yields full C/I/A impact on the device.

3.1 AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
4.0 AV:N/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N

Primary rating from Vendor (CERTVDE).

CVSS VectorNVD

Attack Vector
Network
Attack Complexity
Low
Privileges Required
High
User Interaction
None
Scope
Unchanged
Confidentiality
High
Integrity
High
Availability
High

Lifecycle Timeline

3
Patch available
Sep 16, 2026 - 09:16 EUVD
Analysis Generated
Sep 16, 2026 - 08:28 vuln.today
CVE Published
Sep 16, 2026 - 07:52 nvd
HIGH 7.2

DescriptionNVD

A high-privileged remote attacker can exploit a command injection vulnerability in the /api/datastorage/data endpoint by sending a PUT request with admin credentials allowing execution of commands with root privileges on the device.

AnalysisAI

Command injection via the /api/datastorage/data REST API endpoint in Pepperl+Fuchs ICE2/ICE3 and Phoenix Contact IOL-MA8 IO-Link master devices allows an authenticated administrator to execute arbitrary OS commands with root privileges by sending a crafted HTTP PUT request. The flaw spans multiple hardware variants from both vendors and is disclosed across three CERTVDE advisories (VDE-2026-014, VDE-2026-027, VDE-2026-028), indicating broad impact across related product families. …

Unlock full vulnerability intelligence

  • Risk assessment & exploitation conditions
  • Attack chain visualization
  • Remediation with exact patch versions
  • Threat intelligence from 22 sources
  • Personal watchlist & email alerts
Continue with Google Continue with GitHub

Free forever · No credit card required

Attack ChainAIDerived

Hypothetical attack flow derived from CVE metadata

Access
technique details hidden
Delivery
technique details hidden
Exploit
technique details hidden
Execution
technique details hidden
Impact
technique details hidden
Sign in to reveal

Vulnerability AssessmentAI

Exploitation Exploitation requires possession of valid admin-level credentials for the target device, as confirmed by PR:H in the CVSS:3.1 vector. … Additional conditions and limiting factors are described in the full assessment.
Risk Assessment The NVD CVSS 7.2 score (AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H) is well-calibrated: the network vector and low attack complexity reflect the accessible REST API, but the score is appropriately moderated to the high-sevens by the PR:H requirement - admin credentials are a meaningful prerequisite. … Full risk analysis with EPSS, KEV, and SSVC signal comparison available after sign-in.
Exploit Scenario Full exploit scenario with step-by-step reproduction available after sign-in.
Remediation Consult the vendor-specific CERTVDE advisories at https://www.certvde.com/en/advisories/VDE-2026-014/, https://www.certvde.com/en/advisories/VDE-2026-027/, and https://www.certvde.com/en/advisories/VDE-2026-028/ to obtain confirmed patched firmware versions for each affected model - specific fix versions are not enumerated in currently available NVD data and should not be inferred. … Detailed patch versions, workarounds, and compensating controls in full report.
Sign in to read full assessment

Recommended ActionAI

Within 24 hours: immediately inventory all Pepperl+Fuchs ICE2/ICE3 and Phoenix Contact IOL-MA8 devices in your environment, implement network segmentation to isolate these devices, and restrict REST API administrative access to essential accounts only. …

Sign in for detailed remediation steps and compensating controls.

Threat intelligence, references, and detailed analysis are available after sign-in.

More in Ice2 8Iol1 G65L V1D

View all
CVE-2026-27565 CRITICAL
9.8 Sep 16

Root-level remote code execution affects Pepperl+Fuchs ICE2/ICE3-series and Phoenix Contact IOL-MA8 IO-Link master gatew
CVE-2026-27546 CRITICAL
9.8 Sep 16

Authentication bypass in Pepperl+Fuchs ICE2/ICE3-series IO-Link masters (and OEM-equivalent Phoenix Contact IOL-MA8 modu
CVE-2026-27559 HIGH
8.8 Sep 16

Command injection in Pepperl+Fuchs ICE2/ICE3 and Phoenix Contact IOL MA8 series IO-Link Master devices allows a low-priv
CVE-2026-27558 HIGH
8.8 Sep 16

Command injection via a PHP web management endpoint on Pepperl+Fuchs ICE2/ICE3 series IO-Link Masters and Phoenix Contac
CVE-2026-27556 HIGH
8.8 Sep 16

Remote code execution is achievable on Pepperl+Fuchs ICE2/ICE3-series IO-Link Master devices and the Phoenix Contact IOL
CVE-2026-27555 HIGH
8.8 Sep 16

Remote code execution via PHP local file inclusion on Pepperl+Fuchs ICE2/ICE3 series IO-Link Master devices and OEM equi
CVE-2026-27554 HIGH
8.8 Sep 16

Command injection via the PHP-based IODD parameter save endpoint on Pepperl+Fuchs ICE2/ICE3 series IO-Link masters and O
CVE-2026-27551 HIGH
8.8 Sep 16

Command injection in Pepperl+Fuchs ICE2/ICE3 IO-Link Master devices (and OEM variants from Phoenix Contact and others) a
CVE-2026-27550 HIGH
8.8 Sep 16

Command injection via the Field_Shadow_Password class in Pepperl+Fuchs ICE2/ICE3 IO-Link master devices and Phoenix Cont
CVE-2026-27549 HIGH
8.8 Sep 16

Command injection in Pepperl+Fuchs ICE2/ICE3 series and Phoenix Contact IOL_MA8 IO-Link master devices enables an authen
CVE-2026-27548 HIGH
8.8 Sep 16

Command injection in Pepperl+Fuchs ICE2/ICE3 IO-Link Master devices and OEM equivalents allows a low-privileged authenti
CVE-2026-27547 HIGH
8.8 Sep 16

Command injection in Pepperl+Fuchs ICE2/ICE3 IO-Link Master devices (and OEM equivalents from Phoenix Contact and others

Same weakness CWE-78 – OS Command Injection

View all
CVE-2019-15107 CRITICAL POC
9.8
CVE-2024-51378 CRITICAL POC
9.8
CVE-2014-6271 CRITICAL POC
9.8
CVE-2018-11138 CRITICAL POC
9.8
CVE-2014-6278 HIGH POC
8.8
CVE-2017-6334 HIGH POC
8.8
CVE-2024-50603 CRITICAL POC
10.0
CVE-2024-9474 MEDIUM POC
6.9

Same technique Command Injection

View all
CVE-2024-21887 CRITICAL POC
9.1
CVE-2019-15107 CRITICAL POC
9.8
CVE-2024-51378 CRITICAL POC
9.8
CVE-2012-1823 CRITICAL POC
9.8
CVE-2016-1555 CRITICAL POC
9.8
CVE-2014-6271 CRITICAL POC
9.8
CVE-2024-55956 CRITICAL POC
9.8
CVE-2018-11138 CRITICAL POC
9.8

Share

CVE-2026-27564 vulnerability details – vuln.today
Back

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy