Skip to content
CVE PROGRAM SOURCE RECORD5.3 Medium

CVE-2021-20995

WAGO: Managed Switches: Storage of user credentials in a cookie

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
CERTVDE

Description

In multiple managed switches by WAGO in different versions the webserver cookies of the web based UI contain user credentials.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

WAGO 0852-0303

  • unspecified to ≤ V1.2.3.S0affected

WAGO 0852-1305

  • unspecified to ≤ V1.1.7.S0affected

WAGO 0852-1505

  • unspecified to ≤ V1.1.6.S0affected

WAGO 0852-1305/000-001

  • unspecified to ≤ V1.0.4.S0affected

WAGO 0852-1505/000-001

  • unspecified to ≤ V1.0.4.S0affected

References