CVE-2021-20998

🗓️ 13 May 2021 13:45:25Reported by CERTVDEType

cve🔗 web.nvd.nist.gov📰️ 4 Media mentions👁 50 Views

CVE-2021-20998: Unauthorized user creation in WAGO managed switche

Reporter	Title	Published	Views	Family All 6
CNNVD	WAGO 访问控制错误漏洞	13 May 202100:00	–	cnnvd
CNVD	WAGO Unauthorized Access Vulnerability	14 May 202100:00	–	cnvd
Cvelist	CVE-2021-20998 WAGO: Managed Switches: Unauthorized creation of user accounts	13 May 202113:45	–	cvelist
EUVD	EUVD-2021-8407	3 Oct 202520:07	–	euvd
NVD	CVE-2021-20998	13 May 202114:15	–	nvd
Prion	Authorization	13 May 202114:15	–	prion

NVD

Vulners

Node

wago 0852-0303_firmwareRange≤1.2.3.s0

AND

wago 0852-0303Match-

Node

wago 0852-1305_firmwareRange≤1.1.7.s0

AND

wago 0852-1305Match-

Node

wago 0852-1505_firmwareRange≤1.1.6.s0

AND

wago 0852-1505Match-

Node

wago 0852-1305/000-001_firmwareRange≤1.0.4.s0

AND

wago 0852-1305/000-001Match-

Node

wago 0852-1505/000-001_firmwareRange≤1.0.4.s0

AND

wago 0852-1505/000-001Match-

[
  {
    "product": "0852-0303",
    "vendor": "WAGO",
    "versions": [
      {
        "lessThanOrEqual": "V1.2.3.S0",
        "status": "affected",
        "version": "unspecified",
        "versionType": "custom"
      }
    ]
  },
  {
    "product": "0852-1305",
    "vendor": "WAGO",
    "versions": [
      {
        "lessThanOrEqual": "V1.1.7.S0",
        "status": "affected",
        "version": "unspecified",
        "versionType": "custom"
      }
    ]
  },
  {
    "product": "0852-1505",
    "vendor": "WAGO",
    "versions": [
      {
        "lessThanOrEqual": "V1.1.6.S0",
        "status": "affected",
        "version": "unspecified",
        "versionType": "custom"
      }
    ]
  },
  {
    "product": "0852-1305/000-001",
    "vendor": "WAGO",
    "versions": [
      {
        "lessThanOrEqual": "V1.0.4.S0",
        "status": "affected",
        "version": "unspecified",
        "versionType": "custom"
      }
    ]
  },
  {
    "product": "0852-1505/000-001",
    "vendor": "WAGO",
    "versions": [
      {
        "lessThanOrEqual": "V1.0.4.S0",
        "status": "affected",
        "version": "unspecified",
        "versionType": "custom"
      }
    ]
  }
]

Source	Link
cert	www.cert.vde.com/en-us/advisories/vde-2021-013

21 Nov 2024 05:47Current

9.5High risk

Vulners AI Score9.5

CVSS 27.5

CVSS 3.19.8 - 10

EPSS0.00169

CWE-306