← back
CVE-2021-34565

In WirelessHART-Gateway versions 3.0.7 to 3.0.9 hard-coded credentials have been found

CVSS 9.8 CRITICALEPSS 1.0%CWE-798
In PEPPERL+FUCHS WirelessHART-Gateway 3.0.7 to 3.0.9 the SSH and telnet services are active with hard-coded credentials.
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Affected products
Phoenix Contact · WHA-GW-F2D2-0-AS- Z2-ETHPhoenix Contact · WHA-GW-F2D2-0-AS- Z2-ETH.EIP

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →
References
https://cert.vde.com/en-us/advisories/vde-2021-027