8.8
Élevée
CVE-2021-20994 In multiple managed switches by WAGO in different versions an attacker may trick a legitimate user to click a link to…
Description
In multiple managed switches by WAGO in different versions an attacker may trick a legitimate user to click a link to inject possible malicious code into the Web-Based Management.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| 0852-0303 1.2 | premières → 1.2.3.S0 | Pas de correctif indiqué |
| 0852-1305 1.1 | premières → 1.1.7.S0 | Pas de correctif indiqué |
| 0852-1505 1.1 | premières → 1.1.6.S0 | Pas de correctif indiqué |
| 0852-1305/000-001 1.0 | premières → 1.0.4.S0 | Pas de correctif indiqué |
| 0852-1505/000-001 1.0 | premières → 1.0.4.S0 | Pas de correctif indiqué |
Autres CVE de 0852-0303
Les 6 CVE de 0852-0303 →
CVE-2021-20997
In multiple managed switches by WAGO in different versions it is possible to read out the password hashes of all…
7.5
Élevée
CVE-2021-20998
In multiple managed switches by WAGO in different versions without authorization and with specially crafted packets it…
10.0
Critique
CVE-2021-20995
In multiple managed switches by WAGO in different versions the webserver cookies of the web based UI contain user…
5.3
Moyenne
CVE-2021-20996
In multiple managed switches by WAGO in different versions special crafted requests can lead to cookies being…
5.3
Moyenne