<?xml version="1.0" encoding="UTF-8"?><rss version="2.0"><channel><title>agentprime: phoenix-contact-wha-gw-f2d2-0-as-z2-eth</title><description>Every new CVE for phoenix-contact-wha-gw-f2d2-0-as-z2-eth.</description><link>https://agentprime.io/</link><item><title>CVE-2021-34565: In WirelessHART-Gateway versions 3.0.7 to 3.0.9 hard-coded credentials have been found</title><link>https://agentprime.io/advisories/CVE-2021-34565/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2021-34565/</guid><description>CVSS 9.8 (Critical). Critical: CVSS score 9.8: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Tue, 31 Aug 2021 10:33:00 GMT</pubDate><category>CVE</category><category>critical</category></item><item><title>CVE-2021-34564: In WirelessHART-Gateway versions 3.0.9 a vulnerability allows to read and write sensitive data in a cookie</title><link>https://agentprime.io/advisories/CVE-2021-34564/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2021-34564/</guid><description>CVSS 5.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Tue, 31 Aug 2021 10:32:59 GMT</pubDate><category>CVE</category></item><item><title>CVE-2021-34563: In WirelessHART-Gateway versions 3.0.8 and 3.0.9 the HttpOnly flag is missing in a cookie which allows client-side javascript to modify it</title><link>https://agentprime.io/advisories/CVE-2021-34563/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2021-34563/</guid><description>CVSS 3.3 (Low). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Tue, 31 Aug 2021 10:32:58 GMT</pubDate><category>CVE</category></item><item><title>CVE-2021-34562: A vulnerability in WirelessHART-Gateway 3.0.8 it is possible to inject arbitrary JavaScript into the application&apos;s response</title><link>https://agentprime.io/advisories/CVE-2021-34562/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2021-34562/</guid><description>CVSS 5.4 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Tue, 31 Aug 2021 10:32:57 GMT</pubDate><category>CVE</category></item><item><title>CVE-2021-34561: A vulnerability in WirelessHART-Gateway &lt;= 3.0.8 allows to bypass any IP or firewall based access restrictions through DNS rebinding</title><link>https://agentprime.io/advisories/CVE-2021-34561/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2021-34561/</guid><description>CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Tue, 31 Aug 2021 10:32:56 GMT</pubDate><category>CVE</category></item><item><title>CVE-2021-34560: A vulnerability in WirelessHART-Gateway &lt;= 3.0.9 could lead to information exposure of sensitive information</title><link>https://agentprime.io/advisories/CVE-2021-34560/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2021-34560/</guid><description>CVSS 5.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Tue, 31 Aug 2021 10:32:55 GMT</pubDate><category>CVE</category></item><item><title>CVE-2021-34559: A vulnerability in WirelessHART-Gateway &lt;= 3.0.8 may allow remote attackers to rewrite links and URLs in cached pages to arbitrary strings</title><link>https://agentprime.io/advisories/CVE-2021-34559/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2021-34559/</guid><description>CVSS 5.4 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Tue, 31 Aug 2021 10:32:54 GMT</pubDate><category>CVE</category></item><item><title>CVE-2021-33555: A vulnerability may allow remote attackers to read arbitrary files on the server of the WirelessHART-Gateway</title><link>https://agentprime.io/advisories/CVE-2021-33555/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2021-33555/</guid><description>CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Tue, 31 Aug 2021 10:32:52 GMT</pubDate><category>CVE</category></item></channel></rss>