CVE-2021-34561

Published: Aug 31, 2021Modified: Jun 17, 2026

8.8

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Exploitability: 2.8 / Impact: 5.9

Source: NVD

Description

In PEPPERL+FUCHS WirelessHART-Gateway <= 3.0.8 serious issue exists, if the application is not externally accessible or uses IP-based access restrictions. Attackers can use DNS Rebinding to bypass any IP or firewall based access restrictions that may be in place, by proxying through their target's browser.

Affected (2)

Products: Pepperl Fuchs: Wha Gw F2d2 0 As Z2 Eth Firmware, Wha Gw F2d2 0 As Z2 Eth.eip Firmware

2 products

Wha Gw F2d2 0 As Z2 Eth Firmware

Wha Gw F2d2 0 As Z2 Eth.eip Firmware

Configuration A

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Pepperl Fuchs Wha Gw F2d2 0 As Z2 Eth Firmware	Up to 3.0.8

Running on/with	Platform Versions
Pepperl Fuchs Wha Gw F2d2 0 As Z2 Eth	All versions

Configuration B

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Pepperl Fuchs Wha Gw F2d2 0 As Z2 Eth.eip Firmware	Up to 3.0.8

Running on/with	Platform Versions
Pepperl Fuchs Wha Gw F2d2 0 As Z2 Eth.eip	All versions

Related CWEs

Reliance on Reverse DNS Resolution for a Security-Critical Action

The product performs reverse DNS resolution on an IP address to obtain the hostname and make a security decision, but it does not properly ensure that the IP address is truly associated with the hostname.

References (2)

https://cert.vde.com/en-us/advisories/vde-2021-027

Source: info@cert.vde.com

Third Party Advisory

https://cert.vde.com/en-us/advisories/vde-2021-027

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party Advisory

Timeline

No history available yet.