critical9.4
CVE-2021-20999
In Weidmüller u-controls and IoT-Gateways in versions up to 1.12.1 a network port intended only for device-internal usage is accidentally accessible via extern…
Impact
In Weidmüller u-controls and IoT-Gateways in versions up to 1.12.1 a network port intended only for device-internal usage is accidentally accessible via external network interfaces. By exploiting this vulnerability the device may be manipulated or the operation may be stopped.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Weidmueller | Uc20-Wl2000-Ac Firmware | from 1.3.0 before 1.9.1 from 1.10.0 before 1.10.3 Versions 1.11.0, 1.12.1 |
| Weidmueller | Uc20-Wl2000-Iot Firmware | from 1.3.0 before 1.9.1 from 1.10.0 before 1.10.3 Versions 1.11.0, 1.12.1 |
| Weidmueller | Iot-Gw30 Firmware | from 1.3.0 before 1.9.1 from 1.10.0 before 1.10.3 Versions 1.11.0, 1.12.1 |
| Weidmueller | Iot-Gw30-4g-Eu Firmware | from 1.3.0 before 1.9.1 from 1.10.0 before 1.10.3 Versions 1.11.0, 1.12.1 |