CVE-2021-20993

🗓️ 13 May 2021 13:45:24Reported by CERTVDEType

cve🔗 web.nvd.nist.gov📰️ 4 Media mentions👁 49 Views

Multiple WAGO switches reveal directory listing to attackers

Reporter	Title	Published	Views	Family All 6
CNNVD	WAGO 信息泄露漏洞	13 May 202100:00	–	cnnvd
Cvelist	CVE-2021-20993 WAGO: Managed Switches: Exposure of sensitive information through directory listing	13 May 202113:45	–	cvelist
EUVD	EUVD-2021-8402	3 Oct 202520:07	–	euvd
NVD	CVE-2021-20993	13 May 202114:15	–	nvd
OSV	CVE-2021-20993	13 May 202114:15	–	osv
Prion	Directory traversal	13 May 202114:15	–	prion

NVD

Vulners

Node

wago 0852-0303_firmwareRange≤1.2.3.s0

AND

wago 0852-0303Match-

Node

wago 0852-1305_firmwareRange≤1.1.7.s0

AND

wago 0852-1305Match-

Node

wago 0852-1505_firmwareRange≤1.1.6.s0

AND

wago 0852-1505Match-

Node

wago 0852-1305/000-001_firmwareRange≤1.0.4.s0

AND

wago 0852-1305/000-001Match-

Node

wago 0852-1505/000-001_firmwareRange≤1.0.4.s0

AND

wago 0852-1505/000-001Match-

[
  {
    "product": "0852-0303",
    "vendor": "WAGO",
    "versions": [
      {
        "lessThanOrEqual": "V1.2.3.S0",
        "status": "affected",
        "version": "unspecified",
        "versionType": "custom"
      }
    ]
  },
  {
    "product": "0852-1305",
    "vendor": "WAGO",
    "versions": [
      {
        "lessThanOrEqual": "V1.1.7.S0",
        "status": "affected",
        "version": "unspecified",
        "versionType": "custom"
      }
    ]
  },
  {
    "product": "0852-1505",
    "vendor": "WAGO",
    "versions": [
      {
        "lessThanOrEqual": "V1.1.6.S0",
        "status": "affected",
        "version": "unspecified",
        "versionType": "custom"
      }
    ]
  },
  {
    "product": "0852-1305/000-001",
    "vendor": "WAGO",
    "versions": [
      {
        "lessThanOrEqual": "V1.0.4.S0",
        "status": "affected",
        "version": "unspecified",
        "versionType": "custom"
      }
    ]
  },
  {
    "product": "0852-1505/000-001",
    "vendor": "WAGO",
    "versions": [
      {
        "lessThanOrEqual": "V1.0.4.S0",
        "status": "affected",
        "version": "unspecified",
        "versionType": "custom"
      }
    ]
  }
]

Source	Link
cert	www.cert.vde.com/en-us/advisories/vde-2021-013

21 Nov 2024 05:47Current

5.3Medium risk

Vulners AI Score5.3

CVSS 25

CVSS 3.15.3

EPSS0.00232

CWE-200