Skip to content
OpenAdvisories
Medium · 5.3 CVE-2021-20993 EUVD-2021-8402GHSA-8xqw-xjxh-7m7j

WAGO: Managed Switches: Exposure of sensitive information through directory listing

Published May 13, 2021 · Updated Sep 16, 2024 · Assigned by CERTVDE

Vendor: WAGO Product: 0852-0303 Product: 0852-1305 Product: 0852-1305/000-001 Product: 0852-1505 Product: 0852-1505/000-001 Category: ICS / OT

Description

In multiple managed switches by WAGO in different versions the activated directory listing provides an attacker with the index of the resources located inside the directory.

Affected products

VendorProductAffectedFixed
WAGO 0852-0303 unspecified – ≤ V1.2.3.S0 —
WAGO 0852-1305 unspecified – ≤ V1.1.7.S0 —
WAGO 0852-1505 unspecified – ≤ V1.1.6.S0 —
WAGO 0852-1305/000-001 unspecified – ≤ V1.0.4.S0 —
WAGO 0852-1505/000-001 unspecified – ≤ V1.0.4.S0 —

Advisories 2

References