Skip to content
CVE PROGRAM SOURCE RECORD10.0 Critical

CVE-2021-20998

WAGO: Managed Switches: Unauthorized creation of user accounts

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
CERTVDE

Description

In multiple managed switches by WAGO in different versions without authorization and with specially crafted packets it is possible to create users.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

WAGO 0852-0303

  • unspecified to ≤ V1.2.3.S0affected

WAGO 0852-1305

  • unspecified to ≤ V1.1.7.S0affected

WAGO 0852-1505

  • unspecified to ≤ V1.1.6.S0affected

WAGO 0852-1305/000-001

  • unspecified to ≤ V1.0.4.S0affected

WAGO 0852-1505/000-001

  • unspecified to ≤ V1.0.4.S0affected

References