CVE-2021-34560CWE-522

A vulnerability in WirelessHART-Gateway <= 3.0.9 could lead to information exposure of sensitive information

Medium · published August 31, 2021

CVSS v3.1
5.5
EPSS
0%
Percentile
10.3
In the wild
Unconfirmed
What it is

In PEPPERL+FUCHS WirelessHART-Gateway <= 3.0.9 a form contains a password field with autocomplete enabled. The stored credentials can be captured by an attacker who gains control over the user's computer. Therefore the user must have logged in at least once.

The record
Technical detail
CVSS v3.1
5.5 · MEDIUM
Vector
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.00208 · 10.3th percentile
Weakness
CWE-522 · Insufficiently Protected Credentials
Published
2021-08-31T10:32Z
EPSS history
Timeline
  • 31 AUG 10:32Z
    A vulnerability in WirelessHART-Gateway <= 3.0.9 could lead to information exposure of sensitive information
    cvelistv5