Skip to content
CVE PROGRAM SOURCE RECORD5.5 Medium

CVE-2021-34560

A vulnerability in WirelessHART-Gateway <= 3.0.9 could lead to information exposure of sensitive information

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
CERTVDE

Description

In PEPPERL+FUCHS WirelessHART-Gateway <= 3.0.9 a form contains a password field with autocomplete enabled. The stored credentials can be captured by an attacker who gains control over the user's computer. Therefore the user must have logged in at least once.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Phoenix Contact WHA-GW-F2D2-0-AS- Z2-ETH

  • 3.0.9 to ≤ 3.0.9affected

Phoenix Contact WHA-GW-F2D2-0-AS- Z2-ETH.EIP

  • 3.0.9 to ≤ 3.0.9affected

References