Skip to content
OpenAdvisories
Medium · 5.5 CVE-2021-34564 EUVD-2021-21214GHSA-g9mc-4fcm-jrr6

In WirelessHART-Gateway versions 3.0.9 a vulnerability allows to read and write sensitive data in a cookie

Published Aug 31, 2021 · Updated Sep 17, 2024 · Assigned by CERTVDE

Description

Any cookie-stealing vulnerabilities within the application or browser would enable an attacker to steal the user's credentials to the PEPPERL+FUCHS WirelessHART-Gateway 3.0.9.

Affected products

VendorProductAffectedFixed
Phoenix Contact WHA-GW-F2D2-0-AS- Z2-ETH 3.0.9 —
Phoenix Contact WHA-GW-F2D2-0-AS- Z2-ETH.EIP 3.0.9 —

Advisories 2

References