Back to CVE Browser

CVE-2021-20998

CRITICAL

10.0

CVSS Severity Score

EPSS Score0.1890%

EPSS Percentile26.79th

PublishedMay 13, 2021

Last ModifiedNov 21, 2024

Vulnerability Description

In multiple managed switches by WAGO in different versions without authorization and with specially crafted packets it is possible to create users.

Affected Platforms (CPE)

💻

Wago

0852 0303 Firmware

<= 1.2.3.s0

💻

Wago

0852 1305 Firmware

<= 1.1.7.s0

💻

Wago

0852 1505 Firmware

<= 1.1.6.s0

💻

Wago

0852 1305\/000 001 Firmware

<= 1.0.4.s0

💻

Wago

0852 1505\/000 001 Firmware

<= 1.0.4.s0

References & Advisories

🔗 https://cert.vde.com/en-us/advisories/vde-2021-013

🔗 https://cert.vde.com/en-us/advisories/vde-2021-013

Related Vulnerabilities

CVE-2021-3916710.0

OpenZepplin is a library for smart contract development. In affected versions a vulnerability in TimelockController allowed an act...

CVE-2021-3916810.0

OpenZepplin is a library for smart contract development. In affected versions a vulnerability in TimelockController allowed an act...

CVE-2021-3388510.0

An Insufficient Verification of Data Authenticity vulnerability in B. Braun SpaceCom2 prior to 012U000062 allows a remote unauthen...

CVE-2021-3919910.0

remark-html is an open source nodejs library which compiles Markdown to HTML. In affected versions the documentation of remark-htm...