ZeroHour
DashboardNewsCVEsExploitsIncidentsAIBriefAnalyticsEntitiesWatchlistIOCsAsk the feedSourcesFeeds & APIKiosk mode

CVE-2021-34560

—
CVSS 3.1
5.5 medium
EPSS
<1%p11
Published
()
Modified
Description

In PEPPERL+FUCHS WirelessHART-Gateway <= 3.0.9 a form contains a password field with autocomplete enabled. The stored credentials can be captured by an attacker who gains control over the user's computer. Therefore the user must have logged in at least once.

Vendors
pepperl-fuchs
Products
wha-gw-f2d2-0-as-z2-eth firmware, wha-gw-f2d2-0-as-z2-eth.eip firmware
Weakness
CWE-522
Vector
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N
NVD CVE.org GitHub PoCs EPSS (0.2%)

In the news

No ingested article mentions this CVE yet.