# Phoenix Contact WHA-GW-F2D2-0-AS- Z2-ETH.EIP.

Every CVE that names Phoenix Contact WHA-GW-F2D2-0-AS- Z2-ETH.EIP among its affected products, newest first. Vendors and products are as the CNA wrote them.

## Records, newest first

- [In WirelessHART-Gateway versions 3.0.7 to 3.0.9 hard-coded credentials have been found](https://agentprime.io/advisories/CVE-2021-34565.md)
  `CVE-2021-34565` · CVE record: Phoenix Contact WHA-GW-F2D2-0-AS- Z2-ETH and 1 more · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 31 Aug 2021 · Tags: Hard-coded credentials
- [In WirelessHART-Gateway versions 3.0.9 a vulnerability allows to read and write sensitive data in a cookie](https://agentprime.io/advisories/CVE-2021-34564.md)
  `CVE-2021-34564` · CVE record: Phoenix Contact WHA-GW-F2D2-0-AS- Z2-ETH and 1 more · CVSS 5.5 Medium · Not analysed yet · Published 31 Aug 2021 · Tags: CWE-315
- [In WirelessHART-Gateway versions 3.0.8 and 3.0.9 the HttpOnly flag is missing in a cookie which allows client-side javascript to modify it](https://agentprime.io/advisories/CVE-2021-34563.md)
  `CVE-2021-34563` · CVE record: Phoenix Contact WHA-GW-F2D2-0-AS- Z2-ETH and 1 more · CVSS 3.3 Low · Not analysed yet · Published 31 Aug 2021 · Tags: CWE-1004
- [A vulnerability in WirelessHART-Gateway 3.0.8 it is possible to inject arbitrary JavaScript into the application's response](https://agentprime.io/advisories/CVE-2021-34562.md)
  `CVE-2021-34562` · CVE record: Phoenix Contact WHA-GW-F2D2-0-AS- Z2-ETH and 1 more · CVSS 5.4 Medium · Not analysed yet · Published 31 Aug 2021 · Tags: Cross-site scripting (XSS)
- [A vulnerability in WirelessHART-Gateway <= 3.0.8 allows to bypass any IP or firewall based access restrictions through DNS rebinding](https://agentprime.io/advisories/CVE-2021-34561.md)
  `CVE-2021-34561` · CVE record: Phoenix Contact WHA-GW-F2D2-0-AS- Z2-ETH and 1 more · CVSS 7.5 High · Not analysed yet · Published 31 Aug 2021 · Tags: CWE-350
- [A vulnerability in WirelessHART-Gateway <= 3.0.9 could lead to information exposure of sensitive information](https://agentprime.io/advisories/CVE-2021-34560.md)
  `CVE-2021-34560` · CVE record: Phoenix Contact WHA-GW-F2D2-0-AS- Z2-ETH and 1 more · CVSS 5.5 Medium · Not analysed yet · Published 31 Aug 2021 · Tags: Hard-coded credentials
- [A vulnerability in WirelessHART-Gateway <= 3.0.8 may allow remote attackers to rewrite links and URLs in cached pages to arbitrary strings](https://agentprime.io/advisories/CVE-2021-34559.md)
  `CVE-2021-34559` · CVE record: Phoenix Contact WHA-GW-F2D2-0-AS- Z2-ETH and 1 more · CVSS 5.4 Medium · Not analysed yet · Published 31 Aug 2021 · Tags: HTTP request smuggling
- [A vulnerability may allow remote attackers to read arbitrary files on the server of the WirelessHART-Gateway](https://agentprime.io/advisories/CVE-2021-33555.md)
  `CVE-2021-33555` · CVE record: Phoenix Contact WHA-GW-F2D2-0-AS- Z2-ETH and 1 more · CVSS 7.5 High · Not analysed yet · Published 31 Aug 2021 · Tags: Path traversal

## Filters and formats

Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page.

- The same list as JSON: <https://api.agentprime.io/v1/advisories?technology=phoenix-contact-wha-gw-f2d2-0-as-z2-eth-eip>
- Every list: <https://agentprime.io/advisories.md>, critical: <https://agentprime.io/advisories/critical.md>; by weakness: <https://agentprime.io/advisories/tag/sql-injection.md> and the other tags in <https://agentprime.io/llms.txt>; by technology: `/advisories/technology/<slug>.md` (`fortinet-fortimail`)

---

The web page: <https://agentprime.io/advisories/technology/phoenix-contact-wha-gw-f2d2-0-as-z2-eth-eip/>. Everything for agents: <https://agentprime.io/llms.txt>.