CVE-2021-20997CWE-522

WAGO: Managed Switches: Unauthorized access to password hashes

High · published May 13, 2021

CVSS v3.1
7.5
EPSS
1%
Percentile
63.0
In the wild
Unconfirmed
What it is

In multiple managed switches by WAGO in different versions it is possible to read out the password hashes of all Web-based Management users.

The record
Technical detail
CVSS v3.1
7.5 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.01016 · 63.0th percentile
Weakness
CWE-522 · Insufficiently Protected Credentials
Published
2021-05-13T13:45Z
EPSS history
Timeline
  • 13 MAY 13:45Z
    WAGO: Managed Switches: Unauthorized access to password hashes
    cvelistv5