CVE-2021-20999CWE-668

WEIDMUELLER: Accidentally open network port in u-controls and IoT-Gateways

Critical · published May 13, 2021

CVSS v3.1
9.4
EPSS
1%
Percentile
60.8
In the wild
Unconfirmed
What it is

🚨 A hidden network port is exposed to the outside world, and it could let attackers mess with your devices! ⚡ Think of it like a secret service entrance to a high-security building that’s accidentally left wide open — an intruder could easily slip in and take charge! If exploited, this vulnerability could allow an attacker to manipulate the Weidmüller u-controls or IoT-Gateways, potentially halting operations or causing unauthorized changes. It’s a critical situation that could lead to complete chaos in your network environment!

Put simply

Think of it like a secret service entrance to a high-security building that’s accidentally left wide open — an intruder could easily slip in and take charge! This vulnerability arises from a network port intended for internal device usage that is mistakenly accessible from external interfaces, allowing unauthorized access.

What to do

If exploited, this vulnerability could allow an attacker to manipulate the Weidmüller u-controls or IoT-Gateways, potentially halting operations or causing unauthorized changes. It’s a critical situation that could lead to complete chaos in your network environment! To protect yourself, immediately upgrade to version 1.12.2 or later of the Weidmüller devices. Consider implementing network segmentation to restrict access to internal ports. Regularly review your configurations to ensure that no unintended access points exist! You’ve got this! Follow these steps to secure your devices and keep your operations running smoothly. 🛡️

The record
Technical detail
CVSS v3.1
9.4 · CRITICAL
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00947 · 60.8th percentile
Weakness
CWE-668 · Exposure of Resource to Wrong Sphere
Published
2021-05-13T13:45Z
EPSS history
Timeline
  • 13 MAY 13:45Z
    WEIDMUELLER: Accidentally open network port in u-controls and IoT-Gateways
    cvelistv5