Skip to content
CVE PROGRAM SOURCE RECORD8.8 High

CVE-2021-20994

WAGO: Managed Switches: Reflected Cross-site Scripting

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
CERTVDE

Description

In multiple managed switches by WAGO in different versions an attacker may trick a legitimate user to click a link to inject possible malicious code into the Web-Based Management.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

WAGO 0852-0303

  • unspecified to ≤ V1.2.3.S0affected

WAGO 0852-1305

  • unspecified to ≤ V1.1.7.S0affected

WAGO 0852-1505

  • unspecified to ≤ V1.1.6.S0affected

WAGO 0852-1305/000-001

  • unspecified to ≤ V1.0.4.S0affected

WAGO 0852-1505/000-001

  • unspecified to ≤ V1.0.4.S0affected

References