ZeroHour
DashboardNewsCVEsExploitsIncidentsAIBriefAnalyticsEntitiesWatchlistIOCsAsk the feedSourcesFeeds & APIKiosk mode

CVE-2021-20998

—
CVSS 3.1
9.8 critical
EPSS
1%p64
Published
()
Modified
Description

In multiple managed switches by WAGO in different versions without authorization and with specially crafted packets it is possible to create users.

Vendors
wago
Products
0852-0303 firmware, 0852-1305 firmware, 0852-1505 firmware, 0852-1305\/000-001 firmware, 0852-1505\/000-001 firmware
Weakness
CWE-306
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
NVD CVE.org GitHub PoCs EPSS (1.1%)

In the news

No ingested article mentions this CVE yet.