7.5
High
CVE-2021-34561 In PEPPERL+FUCHS…
Description
In PEPPERL+FUCHS WirelessHART-Gateway <= 3.0.8 serious issue exists, if the application is not externally accessible or uses IP-based access restrictions. Attackers can use DNS Rebinding to bypass any IP or firewall based access restrictions that may be in place, by proxying through their target's browser.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| WHA-GW-F2D2-0-AS- Z2-ETH | 3.0.8 | No fix stated |
| WHA-GW-F2D2-0-AS- Z2-ETH.EIP | 3.0.8 | No fix stated |
Other CVEs of WHA-GW-F2D2-0-AS- Z2-ETH
The 8 CVEs of WHA-GW-F2D2-0-AS- Z2-ETH →
CVE-2021-34565
In PEPPERL+FUCHS WirelessHART-Gateway 3.0.7 to 3.0.9 the SSH and telnet services are active with hard-coded credentials
9.8
Critical
CVE-2021-34564
Any cookie-stealing vulnerabilities within the application or browser would enable an attacker to steal the user's…
5.5
Medium
CVE-2021-34563
In PEPPERL+FUCHS WirelessHART-Gateway 3.0.8 and 3.0.9 the HttpOnly attribute is not set on a cookie
3.3
Low
CVE-2021-34562
In PEPPERL+FUCHS WirelessHART-Gateway 3.0.8 it is possible to inject arbitrary JavaScript into the application's…
5.4
Medium