CVE-2021-34560

Published: Aug 31, 2021Modified: Jun 17, 2026

5.5

Vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Exploitability: 1.8 / Impact: 3.6

Source: NVD (Secondary)

Description

In PEPPERL+FUCHS WirelessHART-Gateway <= 3.0.9 a form contains a password field with autocomplete enabled. The stored credentials can be captured by an attacker who gains control over the user's computer. Therefore the user must have logged in at least once.

Affected (2)

Products: Pepperl Fuchs: Wha Gw F2d2 0 As Z2 Eth Firmware, Wha Gw F2d2 0 As Z2 Eth.eip Firmware

2 products

Wha Gw F2d2 0 As Z2 Eth Firmware

Wha Gw F2d2 0 As Z2 Eth.eip Firmware

Configuration A

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Pepperl Fuchs Wha Gw F2d2 0 As Z2 Eth Firmware	Up to 3.0.9

Running on/with	Platform Versions
Pepperl Fuchs Wha Gw F2d2 0 As Z2 Eth	All versions

Configuration B

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Pepperl Fuchs Wha Gw F2d2 0 As Z2 Eth.eip Firmware	Up to 3.0.9

Running on/with	Platform Versions
Pepperl Fuchs Wha Gw F2d2 0 As Z2 Eth.eip	All versions

Related CWEs

Insufficiently Protected Credentials

The product transmits or stores authentication credentials, but it uses an insecure method that is susceptible to unauthorized interception and/or retrieval.

References (2)

https://cert.vde.com/en-us/advisories/vde-2021-027

Source: info@cert.vde.com

Third Party Advisory

https://cert.vde.com/en-us/advisories/vde-2021-027

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party Advisory

Timeline

No history available yet.