CVE-2021-20993

WAGO: Managed Switches: Exposure of sensitive information through directory listing

CVSS 5.3 MEDIUMEPSS 0.8%CWE-200

In multiple managed switches by WAGO in different versions the activated directory listing provides an attacker with the index of the resources located inside the directory.

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Productos afectados

WAGO · 0852-0303 WAGO · 0852-1305 WAGO · 0852-1305/000-001 WAGO · 0852-1505 WAGO · 0852-1505/000-001

¿Quieres saber si tu infraestructura está expuesta a esto?

Hablar con TrueHacking →

Referencias

https://cert.vde.com/en-us/advisories/vde-2021-013