Critical · published May 13, 2021
🚨 A crafty packet can create users on WAGO managed switches without breaking a sweat! ⚡ Think of a restaurant where anyone can just walk in and start taking orders without any check-in — that's the kind of chaos this vulnerability could unleash! An attacker could slip in unnoticed and create unauthorized accounts, granting them access to sensitive systems and data. This is absolutely devastating as it could lead to unauthorized control over the network infrastructure, potentially resulting in data breaches or service outages!
Think of a restaurant where anyone can just walk in and start taking orders without any check-in — that's the kind of chaos this vulnerability could unleash! CVE-2021-20998 allows unauthorized user creation on multiple WAGO managed switches by sending specially crafted packets, bypassing any authentication checks that should normally be in place.
An attacker could slip in unnoticed and create unauthorized accounts, granting them access to sensitive systems and data. This is absolutely devastating as it could lead to unauthorized control over the network infrastructure, potentially resulting in data breaches or service outages! Immediately patch affected WAGO switches to the latest firmware version to mitigate this vulnerability. Ensure that all network devices have strict access controls and monitoring in place to detect unauthorized access attempts. You've got this! 🦸 Just follow these steps to secure your network and keep those pesky attackers at bay!