Skip to content
OpenAdvisories
Medium · 5.3 CVE-2021-20996 EUVD-2021-8405GHSA-6gx8-4r4f-rfmq

WAGO: Managed Switches: Unsecure Cookie settings

Published May 13, 2021 · Updated Sep 16, 2024 · Assigned by CERTVDE

Vendor: WAGO Product: 0852-0303 Product: 0852-1305 Product: 0852-1305/000-001 Product: 0852-1505 Product: 0852-1505/000-001 Category: ICS / OT

Description

In multiple managed switches by WAGO in different versions special crafted requests can lead to cookies being transferred to third parties.

Affected products

VendorProductAffectedFixed
WAGO 0852-0303 unspecified – ≤ V1.2.3.S0 —
WAGO 0852-1305 unspecified – ≤ V1.1.7.S0 —
WAGO 0852-1505 unspecified – ≤ V1.1.6.S0 —
WAGO 0852-1305/000-001 unspecified – ≤ V1.0.4.S0 —
WAGO 0852-1505/000-001 unspecified – ≤ V1.0.4.S0 —

Advisories 1

References