VDB
CVE-2021-34560
CVE-2021-34560
PUBLISHED
CVSS 5.5 MEDIUM
In PEPPERL+FUCHS WirelessHART-Gateway <= 3.0.9 a form contains a password field with autocomplete enabled. The stored credentials can be captured by an attacker who gains control over the user's computer. Therefore the user must have logged in at least once.
EPSS 0.21% · 10.8th percentile
Risk Scores
CVSS 3.1
5.5
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N
EPSS Score
0.21%
10.8th percentile
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Phoenix Contact | WHA-GW-F2D2-0-AS- Z2-ETH.EIP | 3.0.9 |
| pepperl-fuchs | wha-gw-f2d2-0-as-z2-eth_firmware | 0 |
| Phoenix Contact | WHA-GW-F2D2-0-AS- Z2-ETH | 3.0.9 |
| pepperl-fuchs | wha-gw-f2d2-0-as-z2-eth.eip_firmware | 0 |
Timeline
- Aug 31, 2021 CVE Published
- Sep 1, 2021 EPSS Score
- Oct 29, 2021 EPSS Score
- Dec 27, 2021 EPSS Score
- Jan 6, 2022 EPSS Score
- Feb 23, 2022 EPSS Score
- Apr 23, 2022 EPSS Score
- Jun 20, 2022 EPSS Score
- Aug 18, 2022 EPSS Score
- Oct 16, 2022 EPSS Score
- Dec 13, 2022 EPSS Score
- Feb 10, 2023 EPSS Score