CVE-2021-20995 MEDIUM

CVE-2021-20995: WAGO: Managed Switches: Storage of user credentials in a cookie

Vendor Wago
Product 0852-0303
Weakness CWE-312 · Cleartext storage
Published May 13, 2021
Last update September 17, 2024
View on NVD All CVEs

CVSS base score

5.3/10
Attack vector Network
Attack complexity Low
Privileges required None
User interaction None
Confidentiality Low
Integrity None

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

What the vulnerability does

01Description

In multiple managed switches by WAGO in different versions the webserver cookies of the web based UI contain user credentials.

Key dates

02Disclosure timeline

May 13, 2021 CVE published
September 17, 2024 Record updated