Skip to content
CVE PROGRAM SOURCE RECORD7.5 High

CVE-2021-20997

WAGO: Managed Switches: Unauthorized access to password hashes

Description

In multiple managed switches by WAGO in different versions it is possible to read out the password hashes of all Web-based Management users.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

WAGO 0852-0303

  • unspecified to ≤ V1.2.3.S0affected

WAGO 0852-1305

  • unspecified to ≤ V1.1.7.S0affected

WAGO 0852-1505

  • unspecified to ≤ V1.1.6.S0affected

WAGO 0852-1305/000-001

  • unspecified to ≤ V1.0.4.S0affected

WAGO 0852-1505/000-001

  • unspecified to ≤ V1.0.4.S0affected

References