Pepperl+Fuchs WirelessHART-Gateway

1. EXECUTIVE SUMMARY CVSS v3 9.8 ATTENTION: Exploitable remotely/low attack complexity Vendor: Pepperl+Fuchs Equipment: WirelessHART-Gateway Vulnerabilities: Use of Hard-coded Credentials, Uncontrolled Resource Consumption, Reliance on Reverse DNS Resolution for a Security-critical Action, Path...

CVE-2021-34561

creationtimestamp| type| source ---|---|--- 2021-08-31 14:33:31+00:00| seen| https://t.me/cibsecurity/28073...

CVE-2021-34561

In PEPPERL+FUCHS WirelessHART-Gateway = 3.0.8 serious issue exists, if the application is not externally accessible or uses IP-based access restrictions. Attackers can use DNS Rebinding to bypass any IP or firewall based access restrictions that may be in place, by proxying through their target's...

CVE-2021-34561

The CVE affects Pepperl+Fuchs WirelessHART-Gateway (versions 3.0.7–3.0.8, with related advisories extending to 3.0.9) where DNS rebinding can bypass IP/firewall access controls by proxying through a target’s browser. Root cause: reliance on DNS-based access controls; impact includes potential una...