Skip to content
OpenAdvisories
Medium · 5.4 CVE-2021-34562 EUVD-2021-21212GHSA-v2hj-gg5v-x38m

A vulnerability in WirelessHART-Gateway 3.0.8 it is possible to inject arbitrary JavaScript into the application's response

Published Aug 31, 2021 · Updated Sep 17, 2024 · Assigned by CERTVDE

Vendor: Phoenix Contact Product: WHA-GW-F2D2-0-AS- Z2-ETH Product: WHA-GW-F2D2-0-AS- Z2-ETH.EIP Category: ICS / OT

Description

In PEPPERL+FUCHS WirelessHART-Gateway 3.0.8 it is possible to inject arbitrary JavaScript into the application's response.

Affected products

VendorProductAffectedFixed
Phoenix Contact WHA-GW-F2D2-0-AS- Z2-ETH 3.0.8 —
Phoenix Contact WHA-GW-F2D2-0-AS- Z2-ETH.EIP 3.0.8 —

Advisories 2

References