critical10.0
CVE-2021-20998
In multiple managed switches by WAGO in different versions without authorization and with specially crafted packets it is possible to create users.
Impact
In multiple managed switches by WAGO in different versions without authorization and with specially crafted packets it is possible to create users.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Wago | 0852-0303 Firmware | through 1.2.3.s0 |
| Wago | 0852-1305 Firmware | through 1.1.7.s0 |
| Wago | 0852-1505 Firmware | through 1.1.6.s0 |
| Wago | 0852-1305\/000-001 Firmware | through 1.0.4.s0 |
| Wago | 0852-1505\/000-001 Firmware | through 1.0.4.s0 |