Skip to content
OpenAdvisories
Critical · 10.0 CVE-2021-20998 EUVD-2021-8407GHSA-wvfh-fc5m-v972

WAGO: Managed Switches: Unauthorized creation of user accounts

Published May 13, 2021 · Updated Sep 17, 2024 · Assigned by CERTVDE

Vendor: WAGO Product: 0852-0303 Product: 0852-1305 Product: 0852-1305/000-001 Product: 0852-1505 Product: 0852-1505/000-001 Category: ICS / OT

Description

In multiple managed switches by WAGO in different versions without authorization and with specially crafted packets it is possible to create users.

Affected products

VendorProductAffectedFixed
WAGO 0852-0303 unspecified – ≤ V1.2.3.S0 —
WAGO 0852-1305 unspecified – ≤ V1.1.7.S0 —
WAGO 0852-1505 unspecified – ≤ V1.1.6.S0 —
WAGO 0852-1305/000-001 unspecified – ≤ V1.0.4.S0 —
WAGO 0852-1505/000-001 unspecified – ≤ V1.0.4.S0 —

Advisories 1

References