Description
In PEPPERL+FUCHS WirelessHART-Gateway <= 3.0.8 serious issue exists, if the application is not externally accessible or uses IP-based access restrictions. Attackers can use DNS Rebinding to bypass any IP or firewall based access restrictions that may be in place, by proxying through their target's browser.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Phoenix Contact | WHA-GW-F2D2-0-AS- Z2-ETH | 3.0.8 – ≤ 3.0.8 | — |
| Phoenix Contact | WHA-GW-F2D2-0-AS- Z2-ETH.EIP | 3.0.8 – ≤ 3.0.8 | — |
Advisories 2
- VDE-2021-027 Pepperl+Fuchs: WirelessHART-Gateway - Vulnerability may allow remote attackers to cause a Denial Of Service CERT@VDE · May 14, 2025
- ICSA-22-097-01 Pepperl+Fuchs WirelessHART-Gateway CISA ICS & IT advisories · Apr 7, 2022