Skip to content
OpenAdvisories
Medium · 5.3 CVE-2021-20995 EUVD-2021-8404GHSA-h3wh-323m-4h77

WAGO: Managed Switches: Storage of user credentials in a cookie

Published May 13, 2021 · Updated Sep 17, 2024 · Assigned by CERTVDE

Vendor: WAGO Product: 0852-0303 Product: 0852-1305 Product: 0852-1305/000-001 Product: 0852-1505 Product: 0852-1505/000-001 Category: ICS / OT

Description

In multiple managed switches by WAGO in different versions the webserver cookies of the web based UI contain user credentials.

Affected products

VendorProductAffectedFixed
WAGO 0852-0303 unspecified – ≤ V1.2.3.S0 —
WAGO 0852-1305 unspecified – ≤ V1.1.7.S0 —
WAGO 0852-1505 unspecified – ≤ V1.1.6.S0 —
WAGO 0852-1305/000-001 unspecified – ≤ V1.0.4.S0 —
WAGO 0852-1505/000-001 unspecified – ≤ V1.0.4.S0 —

Advisories 1

References