CVE-2021-20997

🗓️ 13 May 2021 13:45:25Reported by CERTVDEType

cve🔗 web.nvd.nist.gov📰️ 5 Media mentions👁 52 Views

Multiple WAGO switches allow reading password hashes of Web-based Management users

Reporter	Title	Published	Views	Family All 5
CNNVD	WAGO 安全漏洞	13 May 202100:00	–	cnnvd
Cvelist	CVE-2021-20997 WAGO: Managed Switches: Unauthorized access to password hashes	13 May 202113:45	–	cvelist
EUVD	EUVD-2021-8406	3 Oct 202520:07	–	euvd
NVD	CVE-2021-20997	13 May 202114:15	–	nvd
Prion	Default credentials	13 May 202114:15	–	prion

NVD

Vulners

Node

wago 0852-0303_firmwareRange≤1.2.3.s0

AND

wago 0852-0303Match-

Node

wago 0852-1305_firmwareRange≤1.1.7.s0

AND

wago 0852-1305Match-

Node

wago 0852-1505_firmwareRange≤1.1.6.s0

AND

wago 0852-1505Match-

Node

wago 0852-1305/000-001_firmwareRange≤1.0.4.s0

AND

wago 0852-1305/000-001Match-

Node

wago 0852-1505/000-001_firmwareRange≤1.0.4.s0

AND

wago 0852-1505/000-001Match-

[
  {
    "product": "0852-0303",
    "vendor": "WAGO",
    "versions": [
      {
        "lessThanOrEqual": "V1.2.3.S0",
        "status": "affected",
        "version": "unspecified",
        "versionType": "custom"
      }
    ]
  },
  {
    "product": "0852-1305",
    "vendor": "WAGO",
    "versions": [
      {
        "lessThanOrEqual": "V1.1.7.S0",
        "status": "affected",
        "version": "unspecified",
        "versionType": "custom"
      }
    ]
  },
  {
    "product": "0852-1505",
    "vendor": "WAGO",
    "versions": [
      {
        "lessThanOrEqual": "V1.1.6.S0",
        "status": "affected",
        "version": "unspecified",
        "versionType": "custom"
      }
    ]
  },
  {
    "product": "0852-1305/000-001",
    "vendor": "WAGO",
    "versions": [
      {
        "lessThanOrEqual": "V1.0.4.S0",
        "status": "affected",
        "version": "unspecified",
        "versionType": "custom"
      }
    ]
  },
  {
    "product": "0852-1505/000-001",
    "vendor": "WAGO",
    "versions": [
      {
        "lessThanOrEqual": "V1.0.4.S0",
        "status": "affected",
        "version": "unspecified",
        "versionType": "custom"
      }
    ]
  }
]

Source	Link
cert	www.cert.vde.com/en-us/advisories/vde-2021-013

21 Nov 2024 05:47Current

7.5High risk

Vulners AI Score7.5

CVSS 25

CVSS 3.17.5

EPSS0.00252

CWE-522