9.8

CVE-2021-20999

In Weidmüller u-controls and IoT-Gateways in versions up to 1.12.1 a network port intended only for device-internal usage is accidentally accessible via external network interfaces. By exploiting this vulnerability the device may be manipulated or the operation may be stopped.

Data is provided by the National Vulnerability Database (NVD)
Weidmueller ≫ Uc20-wl2000-ac Firmware Version >= 1.3.0 < 1.9.1
   Weidmueller ≫ Uc20-wl2000-ac Version-
Weidmueller ≫ Uc20-wl2000-ac Firmware Version >= 1.10.0 < 1.10.3
   Weidmueller ≫ Uc20-wl2000-ac Version-
Weidmueller ≫ Uc20-wl2000-ac Firmware Version1.11.0
   Weidmueller ≫ Uc20-wl2000-ac Version-
Weidmueller ≫ Uc20-wl2000-ac Firmware Version1.12.1
   Weidmueller ≫ Uc20-wl2000-ac Version-
Weidmueller ≫ Uc20-wl2000-iot Firmware Version >= 1.3.0 < 1.9.1
   Weidmueller ≫ Uc20-wl2000-iot Version-
Weidmueller ≫ Uc20-wl2000-iot Firmware Version >= 1.10.0 < 1.10.3
   Weidmueller ≫ Uc20-wl2000-iot Version-
Weidmueller ≫ Uc20-wl2000-iot Firmware Version1.11.0
   Weidmueller ≫ Uc20-wl2000-iot Version-
Weidmueller ≫ Uc20-wl2000-iot Firmware Version1.12.1
   Weidmueller ≫ Uc20-wl2000-iot Version-
Weidmueller ≫ Iot-gw30 Firmware Version >= 1.3.0 < 1.9.1
   Weidmueller ≫ Iot-gw30 Version-
Weidmueller ≫ Iot-gw30 Firmware Version >= 1.10.0 < 1.10.3
   Weidmueller ≫ Iot-gw30 Version-
Weidmueller ≫ Iot-gw30 Firmware Version1.11.0
   Weidmueller ≫ Iot-gw30 Version-
Weidmueller ≫ Iot-gw30 Firmware Version1.12.1
   Weidmueller ≫ Iot-gw30 Version-
Weidmueller ≫ Iot-gw30-4g-eu Firmware Version >= 1.3.0 < 1.9.1
   Weidmueller ≫ Iot-gw30-4g-eu Version-
Weidmueller ≫ Iot-gw30-4g-eu Firmware Version >= 1.10.0 < 1.10.3
   Weidmueller ≫ Iot-gw30-4g-eu Version-
Weidmueller ≫ Iot-gw30-4g-eu Firmware Version1.11.0
   Weidmueller ≫ Iot-gw30-4g-eu Version-
Weidmueller ≫ Iot-gw30-4g-eu Firmware Version1.12.1
   Weidmueller ≫ Iot-gw30-4g-eu Version-
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
EPSS Metriken
Type Source Score Percentile
EPSS FIRST.org 0.4% 0.577
CVSS Metriken
Source Base Score Exploit Score Impact Score Vector string
nvd@nist.gov 9.8 3.9 5.9
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
nvd@nist.gov 7.5 10 6.4
AV:N/AC:L/Au:N/C:P/I:P/A:P
info@cert.vde.com 9.4 3.9 5.5
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:H/A:H
CWE-668 Exposure of Resource to Wrong Sphere

The product exposes a resource to the wrong control sphere, providing unintended actors with inappropriate access to the resource.