Vendors / Pepperl+Fuchs Records 50 All Threatist records
Exploited (KEV) 0 None in CISA KEV
CVSS critical 7
CVSS high 33
Exploited now Pepperl+Fuchs records in CISA KEV No Pepperl+Fuchs vulnerabilities are listed in CISA KEV.
Components Products in the NVD configurations · select one to filter the records Records 6 records in Wha-gw-f2d2-0-as-z2-eth.eip Firmware · all components
Priority MEDIUM 44
In PEPPERL+FUCHS WirelessHART-Gateway 3.0.7 to 3.0.9 the SSH and telnet services are active with hard-coded credentials.
CVSS 3.1 CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.0103 · Published 2021-08-31 · No fix listed CWE-798
Priority MEDIUM 40
In PEPPERL+FUCHS WirelessHART-Gateway <= 3.0.8 serious issue exists, if the application is not externally accessible or uses IP-based access restrictions.
CVSS 3.1 HIGH 8.8· Network · No auth · User interaction · EPSS 0.00868 · Published 2021-08-31 · No fix listed CWE-350
Priority LOW 28
In PEPPERL+FUCHS WirelessHART-Gateway 3.0.8 it is possible to inject arbitrary JavaScript into the application's response.
CVSS 3.1 MEDIUM 6.1· Network · No auth · User interaction · EPSS 0.00581 · Published 2021-08-31 · No fix listed CWE-79
Priority LOW 26
In PEPPERL+FUCHS WirelessHART-Gateway <= 3.0.8 a vulnerability may allow remote attackers to rewrite links and URLs in cached pages to arbitrary strings.
CVSS 3.1 MEDIUM 5.4· Network · No auth · User interaction · EPSS 0.00768 · Published 2021-08-31 · No fix listed CWE-444
Priority LOW 24
In PEPPERL+FUCHS WirelessHART-Gateway <= 3.0.9 a form contains a password field with autocomplete enabled.
CVSS 3.1 MEDIUM 5.5· Local · No auth · User interaction · EPSS 0.00208 · Published 2021-08-31 · No fix listed CWE-522
Priority LOW 16
In PEPPERL+FUCHS WirelessHART-Gateway 3.0.8 and 3.0.9 the HttpOnly attribute is not set on a cookie.
CVSS 3.1 LOW 3.3· Local · No auth · User interaction · EPSS 0.00239 · Published 2021-08-31 · No fix listed CWE-1004
Open these records in search → All records by CVSS severity
7 33 9 1 0
THREATIST.IORead the docs