CVE-2021-20994

🗓️ 13 May 2021 13:45:24Reported by CERTVDEType

cve🔗 web.nvd.nist.gov📰️ 4 Media mentions👁 48 Views

WAGO managed switches vulnerability in Web-Based Management

Reporter	Title	Published	Views	Family All 6
CNNVD	WAGO 跨站脚本漏洞	13 May 202100:00	–	cnnvd
CNVD	WAGO Cross-Site Scripting Vulnerability	14 May 202100:00	–	cnvd
Cvelist	CVE-2021-20994 WAGO: Managed Switches: Reflected Cross-site Scripting	13 May 202113:45	–	cvelist
EUVD	EUVD-2021-8403	3 Oct 202520:07	–	euvd
NVD	CVE-2021-20994	13 May 202114:15	–	nvd
Prion	Code injection	13 May 202114:15	–	prion

NVD

Vulners

Node

wago 0852-0303_firmwareRange≤1.2.3.s0

AND

wago 0852-0303Match-

Node

wago 0852-1305_firmwareRange≤1.1.7.s0

AND

wago 0852-1305Match-

Node

wago 0852-1505_firmwareRange≤1.1.6.s0

AND

wago 0852-1505Match-

Node

wago 0852-1305/000-001_firmwareRange≤1.0.4.s0

AND

wago 0852-1305/000-001Match-

Node

wago 0852-1505/000-001_firmwareRange≤1.0.4.s0

AND

wago 0852-1505/000-001Match-

[
  {
    "product": "0852-0303",
    "vendor": "WAGO",
    "versions": [
      {
        "lessThanOrEqual": "V1.2.3.S0",
        "status": "affected",
        "version": "unspecified",
        "versionType": "custom"
      }
    ]
  },
  {
    "product": "0852-1305",
    "vendor": "WAGO",
    "versions": [
      {
        "lessThanOrEqual": "V1.1.7.S0",
        "status": "affected",
        "version": "unspecified",
        "versionType": "custom"
      }
    ]
  },
  {
    "product": "0852-1505",
    "vendor": "WAGO",
    "versions": [
      {
        "lessThanOrEqual": "V1.1.6.S0",
        "status": "affected",
        "version": "unspecified",
        "versionType": "custom"
      }
    ]
  },
  {
    "product": "0852-1305/000-001",
    "vendor": "WAGO",
    "versions": [
      {
        "lessThanOrEqual": "V1.0.4.S0",
        "status": "affected",
        "version": "unspecified",
        "versionType": "custom"
      }
    ]
  },
  {
    "product": "0852-1505/000-001",
    "vendor": "WAGO",
    "versions": [
      {
        "lessThanOrEqual": "V1.0.4.S0",
        "status": "affected",
        "version": "unspecified",
        "versionType": "custom"
      }
    ]
  }
]

Source	Link
cert	www.cert.vde.com/en-us/advisories/vde-2021-013

21 Nov 2024 05:47Current

6.6Medium risk

Vulners AI Score6.6

CVSS 24.3

CVSS 3.16.1 - 8.8

EPSS0.00391

CWE-79