Skip to content
OpenAdvisories
Critical · 9.8 CVE-2021-34565 EUVD-2021-21215GHSA-8v6m-v7w5-7r88

In WirelessHART-Gateway versions 3.0.7 to 3.0.9 hard-coded credentials have been found

Published Aug 31, 2021 · Updated Sep 17, 2024 · Assigned by CERTVDE

Vendor: Phoenix Contact Product: WHA-GW-F2D2-0-AS- Z2-ETH Product: WHA-GW-F2D2-0-AS- Z2-ETH.EIP Category: ICS / OT

Description

In PEPPERL+FUCHS WirelessHART-Gateway 3.0.7 to 3.0.9 the SSH and telnet services are active with hard-coded credentials.

Affected products

VendorProductAffectedFixed
Phoenix Contact WHA-GW-F2D2-0-AS- Z2-ETH 3.0.7 – < 3.0.7*, 3.0.9 – ≤ 3.0.9 3.0.7*
Phoenix Contact WHA-GW-F2D2-0-AS- Z2-ETH.EIP 3.0.7 – < 3.0.7*, 3.0.9 – ≤ 3.0.9 3.0.7*

Advisories 2

References