CVE-2021-20993CWE-200

WAGO: Managed Switches: Exposure of sensitive information through directory listing

Medium · published May 13, 2021

CVSS v3.1
5.3
EPSS
1%
Percentile
55.9
In the wild
Unconfirmed
What it is

In multiple managed switches by WAGO in different versions the activated directory listing provides an attacker with the index of the resources located inside the directory.

The record
Technical detail
CVSS v3.1
5.3 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.00793 · 55.9th percentile
Weakness
CWE-200 · Exposure of Sensitive Information to an Unauthorized Actor
Published
2021-05-13T13:45Z
EPSS history
Timeline
  • 13 MAY 13:45Z
    WAGO: Managed Switches: Exposure of sensitive information through directory listing
    cvelistv5