0852 0303 Firmware

0852-0303_firmware

Vendor: Wago • 6 CVEs

CVEs (6)

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2021-20998 1Wago 50852 0303 Firmware 0852 1305/000 001 Firmware0852 1305 Firmware+2 more Jun 17, 2026 May 13, 2021 N/A· v4 9.8 CRITICAL· v3 7.5 HIGH· v2 In multiple managed switches by WAGO in different versions without authorization and with specially crafted packets it is possible to create users.
CVE-2021-20997 1Wago 50852 0303 Firmware 0852 1305/000 001 Firmware0852 1305 Firmware+2 more Jun 17, 2026 May 13, 2021 N/A· v4 7.5 HIGH· v3 5.0 MEDIUM· v2 In multiple managed switches by WAGO in different versions it is possible to read out the password hashes of all Web-based Management users.
CVE-2021-20996 1Wago 50852 0303 Firmware 0852 1305/000 001 Firmware0852 1305 Firmware+2 more Jun 17, 2026 May 13, 2021 N/A· v4 5.3 MEDIUM· v3 5.0 MEDIUM· v2 In multiple managed switches by WAGO in different versions special crafted requests can lead to cookies being transferred to third parties.
CVE-2021-20995 1Wago 50852 0303 Firmware 0852 1305/000 001 Firmware0852 1305 Firmware+2 more Jun 17, 2026 May 13, 2021 N/A· v4 7.5 HIGH· v3 5.0 MEDIUM· v2 In multiple managed switches by WAGO in different versions the webserver cookies of the web based UI contain user credentials.
CVE-2021-20994 1Wago 50852 0303 Firmware 0852 1305/000 001 Firmware0852 1305 Firmware+2 more Jun 17, 2026 May 13, 2021 N/A· v4 6.1 MEDIUM· v3 4.3 MEDIUM· v2 In multiple managed switches by WAGO in different versions an attacker may trick a legitimate user to click a link to inject possible malicious code into the Web-Based Management.
CVE-2021-20993 1Wago 50852 0303 Firmware 0852 1305/000 001 Firmware0852 1305 Firmware+2 more Jun 17, 2026 May 13, 2021 N/A· v4 5.3 MEDIUM· v3 5.0 MEDIUM· v2 In multiple managed switches by WAGO in different versions the activated directory listing provides an attacker with the index of the resources located inside the directory.