NetSight
critical10.0

CVE-2021-20998

In multiple managed switches by WAGO in different versions without authorization and with specially crafted packets it is possible to create users.

Impact

In multiple managed switches by WAGO in different versions without authorization and with specially crafted packets it is possible to create users.

Affected products

VendorProductAffected versions
Wago0852-0303 Firmware
through 1.2.3.s0
Wago0852-1305 Firmware
through 1.1.7.s0
Wago0852-1505 Firmware
through 1.1.6.s0
Wago0852-1305\/000-001 Firmware
through 1.0.4.s0
Wago0852-1505\/000-001 Firmware
through 1.0.4.s0

Weakness classification

References