123 matches found
PT-2021-20203
Name of the Vulnerable Software and Affected Versions PEPPERL+FUCHS WirelessHART-Gateway versions 3.0.7 and earlier Description The issue allows for unauthenticated path traversal attacks due to a vulnerability in the filename parameter, enabling read access to arbitrary files on the server. This...
PT-2021-20548 · Pepperl+Fuchs · Wirelesshart Gateway
Name of the Vulnerable Software and Affected Versions: PEPPERL+FUCHS WirelessHART-Gateway versions 3.0.8 through 3.0.9 Description: The issue concerns the absence of the HttpOnly attribute on a cookie, allowing its value to be accessed or modified by client-side JavaScript. This could potentially...
PT-2021-20550 · Pepperl+Fuchs · Wirelesshart Gateway
Name of the Vulnerable Software and Affected Versions: PEPPERL+FUCHS WirelessHART-Gateway versions 3.0.7 through 3.0.9 Description: The issue concerns hard-coded credentials in the SSH and telnet services of the affected device. Recommendations: For versions 3.0.7 through 3.0.9, consider disablin...
PT-2021-20544 · Pepperl+Fuchs · Wirelesshart Gateway
Name of the Vulnerable Software and Affected Versions: PEPPERL+FUCHS WirelessHART-Gateway versions 3.0.8 and earlier Description: A vulnerability may allow remote attackers to rewrite links and URLs in cached pages to arbitrary strings. Recommendations: For PEPPERL+FUCHS WirelessHART-Gateway...
Pepperl Fuchs WirelessHART-Gateway has vulnerabilities related to trust management.
The Pepperl Fuchs WirelessHART-Gateway is a gateway device from Pepperl Fuchs, Germany. A trust management issue vulnerability exists in Pepperl Fuchs WirelessHART-Gateway versions 3.0.7 through 3.0.9, which arises when SSH and telnet services are active using hard-coded credentials...
Pepperl Fuchs WirelessHART-Gateway security vulnerabilities
The Pepperl Fuchs WirelessHART-Gateway is a gateway device from the German company Pepperl Fuchs. A security vulnerability exists in Pepperl Fuchs WirelessHART-Gateway version 3.0.9, which can be exploited by attackers to steal user credentials...
Pepperl Fuchs WirelessHART-Gateway cross-site scripting vulnerability
The Pepperl Fuchs WirelessHART-Gateway is a gateway device from Pepperl Fuchs, Germany. A cross-site scripting vulnerability exists in Pepperl Fuchs WirelessHART-Gateway version 3.0.8, which can be exploited by an attacker to inject arbitrary JavaScript into an application response...
Pepperl Fuchs WirelessHART-Gateway security vulnerabilities
Pepperl Fuchs WirelessHART-Gateway is a gateway device from Pepperl Fuchs, Germany. A security vulnerability exists in Pepperl Fuchs WirelessHART-Gateway versions 3.0.8 and 3.0.9 that stems from the HttpOnly attribute not being set on a cookie. An attacker can exploit the vulnerability to read or...
Pepperl Fuchs WirelessHART-Gateway has a vulnerability related to information leakage
Pepperl Fuchs WirelessHART-Gateway is a gateway device from Pepperl Fuchs, Germany. An information disclosure vulnerability exists in Pepperl Fuchs WirelessHART-Gateway version 3.0.9 and prior versions, which originates from a form containing an auto-complete enabled password field. An attacker...
Pepperl Fuchs WirelessHART-Gateway path traversal vulnerability
The Pepperl Fuchs WirelessHART-Gateway is a gateway device from Pepperl Fuchs, Germany. A path traversal vulnerability exists in Pepperl Fuchs WirelessHART-Gateway version 3.0.7 and earlier, which stems from the filename parameter being vulnerable to an unauthenticated path traversal attack that...
PT-2021-20547 · Pepperl+Fuchs · Wirelesshart Gateway
Name of the Vulnerable Software and Affected Versions: PEPPERL+FUCHS WirelessHART-Gateway version 3.0.8 Description: The issue allows for the injection of arbitrary JavaScript into the application's response. Recommendations: For PEPPERL+FUCHS WirelessHART-Gateway version 3.0.8, consider disablin...
CVE-2021-33555: Improper Limitation of a Pathname to a Restricted Directory
In PEPPERL+FUCHS WirelessHART-Gateway = 3.0.7 the filename parameter is vulnerable to unauthenticated path traversal attacks, enabling read access to arbitrary files on the server...
Pepperl Fuchs WirelessHART-Gateway environmental issues vulnerabilities
The Pepperl Fuchs WirelessHART-Gateway is a gateway device from Pepperl Fuchs, Germany. An environmental issue vulnerability exists in Pepperl Fuchs WirelessHART-Gateway version 3.0.8 and prior versions, which can be exploited by an attacker to rewrite links and urls in cached pages as arbitrary...
Pepperl Fuchs WirelessHART-Gateway security vulnerabilities
The Pepperl Fuchs WirelessHART-Gateway is a gateway device from Pepperl Fuchs, Germany. A security vulnerability exists in Pepperl Fuchs WirelessHART-Gateway version 3.0.8 and prior versions, which can be exploited by an attacker to bypass any IP- or firewall-based access restrictions that may be...
PT-2021-20546 · Pepperl+Fuchs · Pepperl+Fuchs Wirelesshart-Gateway
Name of the Vulnerable Software and Affected Versions: PEPPERL+FUCHS WirelessHART-Gateway versions 3.0.8 and earlier Description: A serious issue exists in the application if it is not externally accessible or uses IP-based access restrictions. Attackers can use DNS Rebinding to bypass any IP or...
CVE-2021-34565
In PEPPERL+FUCHS WirelessHART-Gateway 3.0.7 to 3.0.9 the SSH and telnet services are active with hard-coded credentials...
CVE-2021-34563
In PEPPERL+FUCHS WirelessHART-Gateway 3.0.8 and 3.0.9 the HttpOnly attribute is not set on a cookie. This allows the cookie's value to be read or set by client-side JavaScript...
CVE-2021-33555
In PEPPERL+FUCHS WirelessHART-Gateway = 3.0.7 the filename parameter is vulnerable to unauthenticated path traversal attacks, enabling read access to arbitrary files on the server...
CVE-2021-34564
Any cookie-stealing vulnerabilities within the application or browser would enable an attacker to steal the user's credentials to the PEPPERL+FUCHS WirelessHART-Gateway 3.0.9...