CVE-2021-20996

🗓️ 13 May 2021 13:45:24Reported by CERTVDEType

cve🔗 web.nvd.nist.gov📰️ 7 Media mentions👁 54 Views

WAGO managed switches vulnerability in cookie transfe

Reporter	Title	Published	Views	Family All 6
CNNVD	WAGO 安全漏洞	13 May 202100:00	–	cnnvd
Cvelist	CVE-2021-20996 WAGO: Managed Switches: Unsecure Cookie settings	13 May 202113:45	–	cvelist
EUVD	EUVD-2021-8405	3 Oct 202520:07	–	euvd
NCSC	Vulnerabilities fixed in Aruba ClearPass Policy Manager	13 Oct 202100:00	–	ncsc
NVD	CVE-2021-20996	13 May 202114:15	–	nvd
Prion	Code injection	13 May 202114:15	–	prion

NVD

Vulners

Node

wago 0852-0303_firmwareRange≤1.2.3.s0

AND

wago 0852-0303Match-

Node

wago 0852-1305_firmwareRange≤1.1.7.s0

AND

wago 0852-1305Match-

Node

wago 0852-1505_firmwareRange≤1.1.6.s0

AND

wago 0852-1505Match-

Node

wago 0852-1305/000-001_firmwareRange≤1.0.4.s0

AND

wago 0852-1305/000-001Match-

Node

wago 0852-1505/000-001_firmwareRange≤1.0.4.s0

AND

wago 0852-1505/000-001Match-

[
  {
    "product": "0852-0303",
    "vendor": "WAGO",
    "versions": [
      {
        "lessThanOrEqual": "V1.2.3.S0",
        "status": "affected",
        "version": "unspecified",
        "versionType": "custom"
      }
    ]
  },
  {
    "product": "0852-1305",
    "vendor": "WAGO",
    "versions": [
      {
        "lessThanOrEqual": "V1.1.7.S0",
        "status": "affected",
        "version": "unspecified",
        "versionType": "custom"
      }
    ]
  },
  {
    "product": "0852-1505",
    "vendor": "WAGO",
    "versions": [
      {
        "lessThanOrEqual": "V1.1.6.S0",
        "status": "affected",
        "version": "unspecified",
        "versionType": "custom"
      }
    ]
  },
  {
    "product": "0852-1305/000-001",
    "vendor": "WAGO",
    "versions": [
      {
        "lessThanOrEqual": "V1.0.4.S0",
        "status": "affected",
        "version": "unspecified",
        "versionType": "custom"
      }
    ]
  },
  {
    "product": "0852-1505/000-001",
    "vendor": "WAGO",
    "versions": [
      {
        "lessThanOrEqual": "V1.0.4.S0",
        "status": "affected",
        "version": "unspecified",
        "versionType": "custom"
      }
    ]
  }
]

Source	Link
cert	www.cert.vde.com/en-us/advisories/vde-2021-013

21 Nov 2024 05:47Current

5.2Medium risk

Vulners AI Score5.2

CVSS 25

CVSS 3.15.3

EPSS0.00206

CWE-732