Skip to content
OpenAdvisories
High · 7.5 CVE-2021-20997 EUVD-2021-8406GHSA-9w62-6mhp-433w

WAGO: Managed Switches: Unauthorized access to password hashes

Published May 13, 2021 · Updated Sep 16, 2024 · Assigned by CERTVDE

Vendor: WAGO Product: 0852-0303 Product: 0852-1305 Product: 0852-1305/000-001 Product: 0852-1505 Product: 0852-1505/000-001 Category: ICS / OT

Description

In multiple managed switches by WAGO in different versions it is possible to read out the password hashes of all Web-based Management users.

Affected products

VendorProductAffectedFixed
WAGO 0852-0303 unspecified – ≤ V1.2.3.S0 —
WAGO 0852-1305 unspecified – ≤ V1.1.7.S0 —
WAGO 0852-1505 unspecified – ≤ V1.1.6.S0 —
WAGO 0852-1305/000-001 unspecified – ≤ V1.0.4.S0 —
WAGO 0852-1505/000-001 unspecified – ≤ V1.0.4.S0 —

Advisories 1

References