Pepperl+Fuchs

Records50All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical7CVSS 9.0–10.0

CVSS high33CVSS 7.0–8.9

Exploited now

Pepperl+Fuchs records in CISA KEV

No Pepperl+Fuchs vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Wha-gw-f2d2-0-as-z2-eth Firmware 8 records MEDIUM Wha-gw-f2d2-0-as-z2-eth.eip Firmware 6 records MEDIUM Es7506 Firmware 5 records MEDIUM Es7510-xt Firmware 5 records MEDIUM Es7510 Firmware 5 records MEDIUM Es7528 Firmware 5 records MEDIUM Es8508 Firmware 5 records MEDIUM Es8508f Firmware 5 records MEDIUM

Records

8 records in Wha-gw-f2d2-0-as-z2-eth Firmware · all components

TI-2021-13583 CVE-2021-34565 · GHSA-8v6m-v7w5-7r88

In WirelessHART-Gateway versions 3.0.7 to 3.0.9 hard-coded credentials have been found

MEDIUM 44

In PEPPERL+FUCHS WirelessHART-Gateway 3.0.7 to 3.0.9 the SSH and telnet services are active with hard-coded credentials.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.0103 Published 2021-08-31 No fix listed CWE-798

TI-2021-13579 CVE-2021-34561 · GHSA-9fh3-r25p-cgrm

A vulnerability in WirelessHART-Gateway <= 3.0.8 allows to bypass any IP or firewall…

MEDIUM 40

In PEPPERL+FUCHS WirelessHART-Gateway <= 3.0.8 serious issue exists, if the application is not externally accessible or uses IP-based access restrictions.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00868 Published 2021-08-31 No fix listed CWE-350

TI-2021-12950 CVE-2021-33555 · GHSA-xc2w-5wwx-wg78

A vulnerability may allow remote attackers to read arbitrary files on the server of the WirelessHART-Gateway

LOW 35

In PEPPERL+FUCHS WirelessHART-Gateway <= 3.0.7 the filename parameter is vulnerable to unauthenticated path traversal attacks, enabling read access to arbitrary files on the server.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01215 Published 2021-08-31 No fix listed CWE-22

TI-2021-13580 CVE-2021-34562 · GHSA-v2hj-gg5v-x38m

Cross-site scripting in Phoenix Contact WHA-GW-F2D2-0-AS- Z2-ETH

LOW 28

In PEPPERL+FUCHS WirelessHART-Gateway 3.0.8 it is possible to inject arbitrary JavaScript into the application's response.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00581 Published 2021-08-31 No fix listed CWE-79

TI-2021-13577 CVE-2021-34559 · GHSA-fwcq-rwgm-5rc2

A vulnerability in WirelessHART-Gateway <= 3.0.8 may allow remote attackers to rewrite…

LOW 26

In PEPPERL+FUCHS WirelessHART-Gateway <= 3.0.8 a vulnerability may allow remote attackers to rewrite links and URLs in cached pages to arbitrary strings.

CVSS 3.1MEDIUM 5.4 Network No auth User interaction EPSS 0.00768 Published 2021-08-31 No fix listed CWE-444

TI-2021-13582 CVE-2021-34564 · GHSA-g9mc-4fcm-jrr6

In WirelessHART-Gateway versions 3.0.9 a vulnerability allows to read and write sensitive data in a cookie

LOW 24

Any cookie-stealing vulnerabilities within the application or browser would enable an attacker to steal the user's credentials to the PEPPERL+FUCHS WirelessHART-Gateway 3.0.9.

CVSS 3.1MEDIUM 5.5 Local No auth User interaction EPSS 0.00154 Published 2021-08-31 No fix listed CWE-315

TI-2021-13578 CVE-2021-34560 · GHSA-f2pw-r5rx-m6w6

A vulnerability in WirelessHART-Gateway <= 3.0.9 could lead to information exposure of sensitive information

LOW 24

In PEPPERL+FUCHS WirelessHART-Gateway <= 3.0.9 a form contains a password field with autocomplete enabled.

CVSS 3.1MEDIUM 5.5 Local No auth User interaction EPSS 0.00208 Published 2021-08-31 No fix listed CWE-522

TI-2021-13581 CVE-2021-34563 · GHSA-mh9v-6mm6-9gm4

In WirelessHART-Gateway versions 3.0.8 and 3.0.9 the HttpOnly flag is missing in a cookie…

LOW 16

In PEPPERL+FUCHS WirelessHART-Gateway 3.0.8 and 3.0.9 the HttpOnly attribute is not set on a cookie.

CVSS 3.1LOW 3.3 Local No auth User interaction EPSS 0.00239 Published 2021-08-31 No fix listed CWE-1004

Open these records in search →

Critical	7
High	33
Medium	9
Low	1
No CVSS	0