8.8
High
CVE-2021-20994 In multiple managed switches by WAGO in different versions an attacker may trick a legitimate user to click a link to…
Description
In multiple managed switches by WAGO in different versions an attacker may trick a legitimate user to click a link to inject possible malicious code into the Web-Based Management.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| 0852-0303 1.2 | earliest → 1.2.3.S0 | No fix stated |
| 0852-1305 1.1 | earliest → 1.1.7.S0 | No fix stated |
| 0852-1505 1.1 | earliest → 1.1.6.S0 | No fix stated |
| 0852-1305/000-001 1.0 | earliest → 1.0.4.S0 | No fix stated |
| 0852-1505/000-001 1.0 | earliest → 1.0.4.S0 | No fix stated |
Other CVEs of 0852-0303
The 6 CVEs of 0852-0303 →
CVE-2021-20997
In multiple managed switches by WAGO in different versions it is possible to read out the password hashes of all…
7.5
High
CVE-2021-20998
In multiple managed switches by WAGO in different versions without authorization and with specially crafted packets it…
10.0
Critical
CVE-2021-20995
In multiple managed switches by WAGO in different versions the webserver cookies of the web based UI contain user…
5.3
Medium
CVE-2021-20996
In multiple managed switches by WAGO in different versions special crafted requests can lead to cookies being…
5.3
Medium