10.0
Critique
CVE-2021-20998 In multiple managed switches by WAGO in different versions without authorization and with specially crafted packets it…
Description
In multiple managed switches by WAGO in different versions without authorization and with specially crafted packets it is possible to create users.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| 0852-0303 1.2 | premières → 1.2.3.S0 | Pas de correctif indiqué |
| 0852-1305 1.1 | premières → 1.1.7.S0 | Pas de correctif indiqué |
| 0852-1505 1.1 | premières → 1.1.6.S0 | Pas de correctif indiqué |
| 0852-1305/000-001 1.0 | premières → 1.0.4.S0 | Pas de correctif indiqué |
| 0852-1505/000-001 1.0 | premières → 1.0.4.S0 | Pas de correctif indiqué |
Autres CVE de 0852-0303
Les 6 CVE de 0852-0303 →
CVE-2021-20997
In multiple managed switches by WAGO in different versions it is possible to read out the password hashes of all…
7.5
Élevée
CVE-2021-20995
In multiple managed switches by WAGO in different versions the webserver cookies of the web based UI contain user…
5.3
Moyenne
CVE-2021-20996
In multiple managed switches by WAGO in different versions special crafted requests can lead to cookies being…
5.3
Moyenne
CVE-2021-20993
In multiple managed switches by WAGO in different versions the activated directory listing provides an attacker with the…
5.3
Moyenne