Advisories · Technology

WAGO 0852-1305.

Every CVE that names WAGO 0852-1305 among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2021-20998 CVE record

CVSS 10.0 CriticalCritical · CVSS 9+

WAGO: Managed Switches: Unauthorized creation of user accounts
- WAGO 0852-0303
- WAGO 0852-1305
- Authentication bypass
Not analysed yet 13 May 2021
CVE-2021-20997 CVE record

CVSS 7.5 High

WAGO: Managed Switches: Unauthorized access to password hashes
- WAGO 0852-0303
- WAGO 0852-1305
- Hard-coded credentials
Not analysed yet 13 May 2021
CVE-2021-20996 CVE record

CVSS 5.3 Medium

WAGO: Managed Switches: Unsecure Cookie settings
- WAGO 0852-0303
- WAGO 0852-1305
- Broken access control
Not analysed yet 13 May 2021
CVE-2021-20995 CVE record

CVSS 5.3 Medium

WAGO: Managed Switches: Storage of user credentials in a cookie
- WAGO 0852-0303
- WAGO 0852-1305
- Information disclosure
Not analysed yet 13 May 2021
CVE-2021-20994 CVE record

CVSS 8.8 High

WAGO: Managed Switches: Reflected Cross-site Scripting
- WAGO 0852-0303
- WAGO 0852-1305
- Cross-site scripting (XSS)
Not analysed yet 13 May 2021
CVE-2021-20993 CVE record

CVSS 5.3 Medium

WAGO: Managed Switches: Exposure of sensitive information through directory listing
- WAGO 0852-0303
- WAGO 0852-1305
- Information disclosure
Not analysed yet 13 May 2021