CVE-2021-34560
A vulnerability in WirelessHART-Gateway <= 3.0.9 could lead to information exposure of sensitive information
Vexday Risk Score
13Bajo
Decisión SSVC (CISA)
Track
Sin señal de explotación → monitorear
CVSS 5.5EPSS 0.2%KEV nãoPoC —Nuclei —Metasploit —Patch —
Ciclo de vida
31 ago 2021Publicada en NVD
Recomendación: Monitorear — sin señal de explotación por ahora.
In PEPPERL+FUCHS WirelessHART-Gateway <= 3.0.9 a form contains a password field with autocomplete enabled. The stored credentials can be captured by an attacker who gains control over the user's computer. Therefore the user must have logged in at least once.
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N
Productos afectados
Phoenix Contact · WHA-GW-F2D2-0-AS- Z2-ETHPhoenix Contact · WHA-GW-F2D2-0-AS- Z2-ETH.EIP¿Quieres saber si tu infraestructura está expuesta a esto?
Hablar con TrueHacking →