CVE-2021-20993

WAGO: Managed Switches: Exposure of sensitive information through directory listing

CVSS 5.3 MEDIUMEPSS 0.8%CWE-200

In multiple managed switches by WAGO in different versions the activated directory listing provides an attacker with the index of the resources located inside the directory.

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Produtos afetados

WAGO · 0852-0303 WAGO · 0852-1305 WAGO · 0852-1305/000-001 WAGO · 0852-1505 WAGO · 0852-1505/000-001

Quer saber se a sua infraestrutura está exposta a isto?

Falar com a TrueHacking →

Referências

https://cert.vde.com/en-us/advisories/vde-2021-013