Approved changes feed: RSS · Atom

cpe:2.3:o:wago:0852-0303_firmware:*:*:*:*:*:*:*:*

part: o version: * update: *

VendorWago (32ab7757-de27-5378-a269-9c7ac714c35b)
Product0852 0303 Firmware (0c463296-ac2b-5187-a7d6-3aa096de2fa3)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2021-20998 vulnerable 2026-06-08 05:29:11.039721 WAGO: Managed Switches: Unauthorized creation of user accounts
CRITICAL (10)
In multiple managed switches by WAGO in different versions without authorization and with specially crafted packets it is possible to create users.
Published: 2021-05-13T13:45:25.179Z
Updated: 2024-09-17T00:51:42.120Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-20997 vulnerable 2026-06-08 05:29:11.039017 WAGO: Managed Switches: Unauthorized access to password hashes
HIGH (7.5)
In multiple managed switches by WAGO in different versions it is possible to read out the password hashes of all Web-based Management users.
Published: 2021-05-13T13:45:25.054Z
Updated: 2024-09-16T23:42:19.095Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-20996 vulnerable 2026-06-08 05:29:11.038303 WAGO: Managed Switches: Unsecure Cookie settings
MEDIUM (5.3)
In multiple managed switches by WAGO in different versions special crafted requests can lead to cookies being transferred to third parties.
Published: 2021-05-13T13:45:24.938Z
Updated: 2024-09-16T23:15:25.537Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-20995 vulnerable 2026-06-08 05:29:11.037585 WAGO: Managed Switches: Storage of user credentials in a cookie
MEDIUM (5.3)
In multiple managed switches by WAGO in different versions the webserver cookies of the web based UI contain user credentials.
Published: 2021-05-13T13:45:24.828Z
Updated: 2024-09-17T04:24:28.648Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-20994 vulnerable 2026-06-08 05:29:11.036837 WAGO: Managed Switches: Reflected Cross-site Scripting
HIGH (8.8)
In multiple managed switches by WAGO in different versions an attacker may trick a legitimate user to click a link to inject possible malicious code into the Web-Based Management.
Published: 2021-05-13T13:45:24.684Z
Updated: 2024-09-17T01:16:25.472Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-20993 vulnerable 2026-06-08 05:29:11.029579 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.