Export limit exceeded: 425825 CVEs match your query. Please refine your search to export 10,000 CVEs or fewer.

Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 6

Export CSV
CVE-2021-20998

WAGO: Managed Switches: Unauthorized creation of user accounts

In multiple managed switches by WAGO in different versions without authorization and with specially crafted packets it is possible to create users.

CVSS 3.1 · 10 Critical EPSS 1.1% KEV · Not listed
Vendors
Wago
Products
0852-0303 0852-0303 Firmware 0852-1305 and 7 more
CVE-2021-20997

WAGO: Managed Switches: Unauthorized access to password hashes

In multiple managed switches by WAGO in different versions it is possible to read out the password hashes of all Web-based Management users.

CVSS 3.1 · 7.5 High EPSS 1.0% KEV · Not listed
Vendors
Wago
Products
0852-0303 0852-0303 Firmware 0852-1305 and 7 more
CVE-2021-20996

WAGO: Managed Switches: Unsecure Cookie settings

In multiple managed switches by WAGO in different versions special crafted requests can lead to cookies being transferred to third parties.

CVSS 3.1 · 5.3 Medium EPSS < 1% KEV · Not listed
Vendors
Wago
Products
0852-0303 0852-0303 Firmware 0852-1305 and 7 more
CVE-2021-20995

WAGO: Managed Switches: Storage of user credentials in a cookie

In multiple managed switches by WAGO in different versions the webserver cookies of the web based UI contain user credentials.

CVSS 3.1 · 5.3 Medium EPSS < 1% KEV · Not listed
Vendors
Wago
Products
0852-0303 0852-0303 Firmware 0852-1305 and 7 more
CVE-2021-20994

WAGO: Managed Switches: Reflected Cross-site Scripting

In multiple managed switches by WAGO in different versions an attacker may trick a legitimate user to click a link to inject possible malicious code into the Web-Based Management.

CVSS 3.1 · 8.8 High EPSS < 1% KEV · Not listed
Vendors
Wago
Products
0852-0303 0852-0303 Firmware 0852-1305 and 7 more
CVE-2021-20993

WAGO: Managed Switches: Exposure of sensitive information through directory listing

In multiple managed switches by WAGO in different versions the activated directory listing provides an attacker with the index of the resources located inside the directory.

CVSS 3.1 · 5.3 Medium EPSS < 1% KEV · Not listed
Vendors
Wago
Products
0852-0303 0852-0303 Firmware 0852-1305 and 7 more