Vulnerabilities

TI-2021-13583 CVE-2021-34565 · GHSA-8v6m-v7w5-7r88

In WirelessHART-Gateway versions 3.0.7 to 3.0.9 hard-coded credentials have been found

MEDIUM 44

In PEPPERL+FUCHS WirelessHART-Gateway 3.0.7 to 3.0.9 the SSH and telnet services are active with hard-coded credentials.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.0103 Published 2021-08-31 No fix listed CWE-798

TI-2021-13581 CVE-2021-34563 · GHSA-mh9v-6mm6-9gm4

In WirelessHART-Gateway versions 3.0.8 and 3.0.9 the HttpOnly flag is missing in a cookie…

LOW 16

In PEPPERL+FUCHS WirelessHART-Gateway 3.0.8 and 3.0.9 the HttpOnly attribute is not set on a cookie.

CVSS 3.1LOW 3.3 Local No auth User interaction EPSS 0.00239 Published 2021-08-31 No fix listed CWE-1004

TI-2021-13580 CVE-2021-34562 · GHSA-v2hj-gg5v-x38m

Cross-site scripting in Phoenix Contact WHA-GW-F2D2-0-AS- Z2-ETH

LOW 28

In PEPPERL+FUCHS WirelessHART-Gateway 3.0.8 it is possible to inject arbitrary JavaScript into the application's response.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00581 Published 2021-08-31 No fix listed CWE-79

TI-2021-13579 CVE-2021-34561 · GHSA-9fh3-r25p-cgrm

A vulnerability in WirelessHART-Gateway <= 3.0.8 allows to bypass any IP or firewall…

MEDIUM 40

In PEPPERL+FUCHS WirelessHART-Gateway <= 3.0.8 serious issue exists, if the application is not externally accessible or uses IP-based access restrictions.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00868 Published 2021-08-31 No fix listed CWE-350

TI-2021-13578 CVE-2021-34560 · GHSA-f2pw-r5rx-m6w6

A vulnerability in WirelessHART-Gateway <= 3.0.9 could lead to information exposure of sensitive information

LOW 24

In PEPPERL+FUCHS WirelessHART-Gateway <= 3.0.9 a form contains a password field with autocomplete enabled.

CVSS 3.1MEDIUM 5.5 Local No auth User interaction EPSS 0.00208 Published 2021-08-31 No fix listed CWE-522

TI-2021-13577 CVE-2021-34559 · GHSA-fwcq-rwgm-5rc2

A vulnerability in WirelessHART-Gateway <= 3.0.8 may allow remote attackers to rewrite…

LOW 26

In PEPPERL+FUCHS WirelessHART-Gateway <= 3.0.8 a vulnerability may allow remote attackers to rewrite links and URLs in cached pages to arbitrary strings.

CVSS 3.1MEDIUM 5.4 Network No auth User interaction EPSS 0.00768 Published 2021-08-31 No fix listed CWE-444