CVE-2021-34564

CVE-2021-34564 corresponds to a vulnerability in Pepperl+Fuchs WirelessHART-Gateway 3.0.9 where cookies can be stolen due to cookie handling weaknesses (CWE-315). The ICSA advisory identifies affected versions 3.0.7–3.0.9 and lists cookie-related weaknesses among multiple issues (e.g., hard-coded...

CVE-2021-34563

CVE-2021-34563 affects Pepperl+Fuchs WirelessHART-Gateway versions 3.0.8 and 3.0.9. The HttpOnly flag is not set on a cookie, allowing its value to be read or modified by client-side JavaScript. The documented impact is limited to information leakage/ alteration via cookie access, with CVSSv3 bas...

CVE-2021-34562

CVE-2021-34562 affects Pepperl+Fuchs WirelessHART-Gateway, notably versions 3.0.7–3.0.9 (3.0.8 highlighted). The vulnerability allows injection of arbitrary JavaScript into the application’s response (a cross-site scripting-type issue) as described in the ICSA advisory and CVE records. The primar...

CVE-2021-34561

The CVE affects Pepperl+Fuchs WirelessHART-Gateway (versions 3.0.7–3.0.8, with related advisories extending to 3.0.9) where DNS rebinding can bypass IP/firewall access controls by proxying through a target’s browser. Root cause: reliance on DNS-based access controls; impact includes potential una...

CVE-2021-34561 A vulnerability in WirelessHART-Gateway <= 3.0.8 allows to bypass any IP or firewall based access restrictions through DNS rebinding

In PEPPERL+FUCHS WirelessHART-Gateway = 3.0.8 serious issue exists, if the application is not externally accessible or uses IP-based access restrictions. Attackers can use DNS Rebinding to bypass any IP or firewall based access restrictions that may be in place, by proxying through their target's...

CVE-2021-34560

CVE-2021-34560 affects Pepperl+Fuchs WirelessHART-Gateway (versions

CVE-2021-34559

The CVE-2021-34559 vulnerability affects Pepperl+Fuchs WirelessHART-Gateway versions 3.0.8 and earlier. A remote attacker may rewrite links and URLs in cached pages to arbitrary strings. Public documentation lists the issue as an environmental/web-page manipulation vulnerability affecting 3.0.7–3...

CVE-2021-33555

Summary (CVE-2021-33555) : The Pepperl+Fuchs WirelessHART-Gateway (

CVE-2021-33555 A vulnerability may allow remote attackers to read arbitrary files on the server of the WirelessHART-Gateway

In PEPPERL+FUCHS WirelessHART-Gateway = 3.0.7 the filename parameter is vulnerable to unauthenticated path traversal attacks, enabling read access to arbitrary files on the server...

Pepperl Fuchs WirelessHART-Gateway环境问题漏洞

The Pepperl Fuchs WirelessHART-Gateway is a gateway device from Pepperl Fuchs, Germany. An environmental issue vulnerability exists in Pepperl Fuchs WirelessHART-Gateway version 3.0.8 and prior versions, which can be exploited by an attacker to rewrite links and urls in cached pages as arbitrary...

PT-2021-20550 · Pepperl+Fuchs · Wirelesshart Gateway

Name of the Vulnerable Software and Affected Versions: PEPPERL+FUCHS WirelessHART-Gateway versions 3.0.7 through 3.0.9 Description: The issue concerns hard-coded credentials in the SSH and telnet services of the affected device. Recommendations: For versions 3.0.7 through 3.0.9, consider disablin...

Pepperl Fuchs WirelessHART-Gateway安全漏洞

The Pepperl Fuchs WirelessHART-Gateway is a gateway device from the German company Pepperl Fuchs. A security vulnerability exists in Pepperl Fuchs WirelessHART-Gateway version 3.0.9, which can be exploited by attackers to steal user credentials...

Pepperl Fuchs WirelessHART-Gateway 信任管理问题漏洞

The Pepperl Fuchs WirelessHART-Gateway is a gateway device from Pepperl Fuchs, Germany. A trust management issue vulnerability exists in Pepperl Fuchs WirelessHART-Gateway versions 3.0.7 through 3.0.9, which arises when SSH and telnet services are active using hard-coded credentials...

PT-2021-20548 · Pepperl+Fuchs · Wirelesshart Gateway

Name of the Vulnerable Software and Affected Versions: PEPPERL+FUCHS WirelessHART-Gateway versions 3.0.8 through 3.0.9 Description: The issue concerns the absence of the HttpOnly attribute on a cookie, allowing its value to be accessed or modified by client-side JavaScript. This could potentially...

Pepperl Fuchs WirelessHART-Gateway安全漏洞

Pepperl Fuchs WirelessHART-Gateway is a gateway device from Pepperl Fuchs, Germany. A security vulnerability exists in Pepperl Fuchs WirelessHART-Gateway versions 3.0.8 and 3.0.9 that stems from the HttpOnly attribute not being set on a cookie. An attacker can exploit the vulnerability to read or...

PT-2021-20544 · Pepperl+Fuchs · Wirelesshart Gateway

Name of the Vulnerable Software and Affected Versions: PEPPERL+FUCHS WirelessHART-Gateway versions 3.0.8 and earlier Description: A vulnerability may allow remote attackers to rewrite links and URLs in cached pages to arbitrary strings. Recommendations: For PEPPERL+FUCHS WirelessHART-Gateway...

PT-2021-20547 · Pepperl+Fuchs · Wirelesshart Gateway

Name of the Vulnerable Software and Affected Versions: PEPPERL+FUCHS WirelessHART-Gateway version 3.0.8 Description: The issue allows for the injection of arbitrary JavaScript into the application's response. Recommendations: For PEPPERL+FUCHS WirelessHART-Gateway version 3.0.8, consider disablin...

Pepperl Fuchs WirelessHART-Gateway信息泄露漏洞

Pepperl Fuchs WirelessHART-Gateway is a gateway device from Pepperl Fuchs, Germany. An information disclosure vulnerability exists in Pepperl Fuchs WirelessHART-Gateway version 3.0.9 and prior versions, which originates from a form containing an auto-complete enabled password field. An attacker...

Pepperl Fuchs WirelessHART-Gateway跨站脚本漏洞

The Pepperl Fuchs WirelessHART-Gateway is a gateway device from Pepperl Fuchs, Germany. A cross-site scripting vulnerability exists in Pepperl Fuchs WirelessHART-Gateway version 3.0.8, which can be exploited by an attacker to inject arbitrary JavaScript into an application response...

Pepperl Fuchs WirelessHART-Gateway路径遍历漏洞

The Pepperl Fuchs WirelessHART-Gateway is a gateway device from Pepperl Fuchs, Germany. A path traversal vulnerability exists in Pepperl Fuchs WirelessHART-Gateway version 3.0.7 and earlier, which stems from the filename parameter being vulnerable to an unauthenticated path traversal attack that...