9.8

CVE-2021-20999

WEIDMUELLER: Accidentally open network port in u-controls and IoT-Gateways

In Weidmüller u-controls and IoT-Gateways in versions up to 1.12.1 a network port intended only for device-internal usage is accidentally accessible via external network interfaces. By exploiting this vulnerability the device may be manipulated or the operation may be stopped.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Weidmueller ≫ Uc20-wl2000-ac Firmware Version >= 1.3.0 < 1.9.1
   Weidmueller ≫ Uc20-wl2000-ac Version -
Weidmueller ≫ Uc20-wl2000-ac Firmware Version >= 1.10.0 < 1.10.3
   Weidmueller ≫ Uc20-wl2000-ac Version -
Weidmueller ≫ Uc20-wl2000-ac Firmware Version 1.11.0
   Weidmueller ≫ Uc20-wl2000-ac Version -
Weidmueller ≫ Uc20-wl2000-ac Firmware Version 1.12.1
   Weidmueller ≫ Uc20-wl2000-ac Version -
Weidmueller ≫ Uc20-wl2000-iot Firmware Version >= 1.3.0 < 1.9.1
   Weidmueller ≫ Uc20-wl2000-iot Version -
Weidmueller ≫ Uc20-wl2000-iot Firmware Version >= 1.10.0 < 1.10.3
   Weidmueller ≫ Uc20-wl2000-iot Version -
Weidmueller ≫ Uc20-wl2000-iot Firmware Version 1.11.0
   Weidmueller ≫ Uc20-wl2000-iot Version -
Weidmueller ≫ Uc20-wl2000-iot Firmware Version 1.12.1
   Weidmueller ≫ Uc20-wl2000-iot Version -
Weidmueller ≫ Iot-gw30 Firmware Version >= 1.3.0 < 1.9.1
   Weidmueller ≫ Iot-gw30 Version -
Weidmueller ≫ Iot-gw30 Firmware Version >= 1.10.0 < 1.10.3
   Weidmueller ≫ Iot-gw30 Version -
Weidmueller ≫ Iot-gw30 Firmware Version 1.11.0
   Weidmueller ≫ Iot-gw30 Version -
Weidmueller ≫ Iot-gw30 Firmware Version 1.12.1
   Weidmueller ≫ Iot-gw30 Version -
Weidmueller ≫ Iot-gw30-4g-eu Firmware Version >= 1.3.0 < 1.9.1
   Weidmueller ≫ Iot-gw30-4g-eu Version -
Weidmueller ≫ Iot-gw30-4g-eu Firmware Version >= 1.10.0 < 1.10.3
   Weidmueller ≫ Iot-gw30-4g-eu Version -
Weidmueller ≫ Iot-gw30-4g-eu Firmware Version 1.11.0
   Weidmueller ≫ Iot-gw30-4g-eu Version -
Weidmueller ≫ Iot-gw30-4g-eu Firmware Version 1.12.1
   Weidmueller ≫ Iot-gw30-4g-eu Version -
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.95% 0.565
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 9.8 3.9 5.9
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
NIST 7.5 10 6.4
AV:N/AC:L/Au:N/C:P/I:P/A:P
info@cert.vde.com 9.4 3.9 5.5
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:H/A:H
CWE-668 Exposure of Resource to Wrong Sphere

The product exposes a resource to the wrong control sphere, providing unintended actors with inappropriate access to the resource.

https://cert.vde.com/en-us/advisories/vde-2021-016
Third Party Advisory