CVE-2021-34559

Published: Aug 31, 2021Modified: Jun 17, 2026

5.3

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N

Exploitability: 3.9 / Impact: 1.4

Source: NVD

Description

In PEPPERL+FUCHS WirelessHART-Gateway <= 3.0.8 a vulnerability may allow remote attackers to rewrite links and URLs in cached pages to arbitrary strings.

Affected (2)

Products: Pepperl Fuchs: Wha Gw F2d2 0 As Z2 Eth Firmware, Wha Gw F2d2 0 As Z2 Eth.eip Firmware

Pepperl Fuchs

2 products

Wha Gw F2d2 0 As Z2 Eth Firmware

Wha Gw F2d2 0 As Z2 Eth.eip Firmware

Configuration A

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Pepperl Fuchs Wha Gw F2d2 0 As Z2 Eth Firmware	Up to 3.0.8

Running on/with	Platform Versions
Pepperl Fuchs Wha Gw F2d2 0 As Z2 Eth	All versions

Configuration B

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Pepperl Fuchs Wha Gw F2d2 0 As Z2 Eth.eip Firmware	Up to 3.0.8

Running on/with	Platform Versions
Pepperl Fuchs Wha Gw F2d2 0 As Z2 Eth.eip	All versions

Related CWEs

CWE-444

Inconsistent Interpretation of HTTP Requests ('HTTP Request/Response Smuggling')

The product acts as an intermediary HTTP agent (such as a proxy or firewall) in the data flow between two entities such as a client and server, but it does not interpret malformed HTTP requests or responses in ways that are consistent with how the messages will be processed by those entities that are at the ultimate destination.

References (2)

https://cert.vde.com/en-us/advisories/vde-2021-027

Source: info@cert.vde.com

Third Party Advisory

https://cert.vde.com/en-us/advisories/vde-2021-027

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party Advisory

Timeline

No history available yet.