7.5
Élevée
CVE-2021-34561 In PEPPERL+FUCHS…
Description
In PEPPERL+FUCHS WirelessHART-Gateway <= 3.0.8 serious issue exists, if the application is not externally accessible or uses IP-based access restrictions. Attackers can use DNS Rebinding to bypass any IP or firewall based access restrictions that may be in place, by proxying through their target's browser.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| WHA-GW-F2D2-0-AS- Z2-ETH | 3.0.8 | Pas de correctif indiqué |
| WHA-GW-F2D2-0-AS- Z2-ETH.EIP | 3.0.8 | Pas de correctif indiqué |
Autres CVE de WHA-GW-F2D2-0-AS- Z2-ETH
Les 8 CVE de WHA-GW-F2D2-0-AS- Z2-ETH →
CVE-2021-34565
In PEPPERL+FUCHS WirelessHART-Gateway 3.0.7 to 3.0.9 the SSH and telnet services are active with hard-coded credentials
9.8
Critique
CVE-2021-34564
Any cookie-stealing vulnerabilities within the application or browser would enable an attacker to steal the user's…
5.5
Moyenne
CVE-2021-34563
In PEPPERL+FUCHS WirelessHART-Gateway 3.0.8 and 3.0.9 the HttpOnly attribute is not set on a cookie
3.3
Faible
CVE-2021-34562
In PEPPERL+FUCHS WirelessHART-Gateway 3.0.8 it is possible to inject arbitrary JavaScript into the application's…
5.4
Moyenne