5.3
Medium
CVE-2021-20993 In multiple managed switches by WAGO in different versions the activated directory listing provides an attacker with the…
Description
In multiple managed switches by WAGO in different versions the activated directory listing provides an attacker with the index of the resources located inside the directory.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| 0852-0303 1.2 | earliest → 1.2.3.S0 | No fix stated |
| 0852-1305 1.1 | earliest → 1.1.7.S0 | No fix stated |
| 0852-1505 1.1 | earliest → 1.1.6.S0 | No fix stated |
| 0852-1305/000-001 1.0 | earliest → 1.0.4.S0 | No fix stated |
| 0852-1505/000-001 1.0 | earliest → 1.0.4.S0 | No fix stated |
Other CVEs of 0852-0303
The 6 CVEs of 0852-0303 →
CVE-2021-20997
In multiple managed switches by WAGO in different versions it is possible to read out the password hashes of all…
7.5
High
CVE-2021-20998
In multiple managed switches by WAGO in different versions without authorization and with specially crafted packets it…
10.0
Critical
CVE-2021-20995
In multiple managed switches by WAGO in different versions the webserver cookies of the web based UI contain user…
5.3
Medium
CVE-2021-20996
In multiple managed switches by WAGO in different versions special crafted requests can lead to cookies being…
5.3
Medium