← voltar
CVE-2021-34560

A vulnerability in WirelessHART-Gateway <= 3.0.9 could lead to information exposure of sensitive information

CVSS 5.5 MEDIUMEPSS 0.2%CWE-522
In PEPPERL+FUCHS WirelessHART-Gateway <= 3.0.9 a form contains a password field with autocomplete enabled. The stored credentials can be captured by an attacker who gains control over the user's computer. Therefore the user must have logged in at least once.
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N
Produtos afetados
Phoenix Contact · WHA-GW-F2D2-0-AS- Z2-ETHPhoenix Contact · WHA-GW-F2D2-0-AS- Z2-ETH.EIP

Quer saber se a sua infraestrutura está exposta a isto?

Falar com a TrueHacking →
Referências
https://cert.vde.com/en-us/advisories/vde-2021-027