5.5
Moyenne
CVE-2021-34560 In PEPPERL+FUCHS WirelessHART-Gateway <= 3.0.9 a form contains a password field with autocomplete enabled
Description
In PEPPERL+FUCHS WirelessHART-Gateway <= 3.0.9 a form contains a password field with autocomplete enabled. The stored credentials can be captured by an attacker who gains control over the user's computer. Therefore the user must have logged in at least once.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| WHA-GW-F2D2-0-AS- Z2-ETH | 3.0.9 | Pas de correctif indiqué |
| WHA-GW-F2D2-0-AS- Z2-ETH.EIP | 3.0.9 | Pas de correctif indiqué |
Autres CVE de WHA-GW-F2D2-0-AS- Z2-ETH
Les 8 CVE de WHA-GW-F2D2-0-AS- Z2-ETH →
CVE-2021-34565
In PEPPERL+FUCHS WirelessHART-Gateway 3.0.7 to 3.0.9 the SSH and telnet services are active with hard-coded credentials
9.8
Critique
CVE-2021-34564
Any cookie-stealing vulnerabilities within the application or browser would enable an attacker to steal the user's…
5.5
Moyenne
CVE-2021-34563
In PEPPERL+FUCHS WirelessHART-Gateway 3.0.8 and 3.0.9 the HttpOnly attribute is not set on a cookie
3.3
Faible
CVE-2021-34562
In PEPPERL+FUCHS WirelessHART-Gateway 3.0.8 it is possible to inject arbitrary JavaScript into the application's…
5.4
Moyenne