Approved changes feed: RSS · Atom

cpe:2.3:h:wago:0852-0303:-:*:*:*:*:*:*:*

part: h version: - update: *

VendorWago (32ab7757-de27-5378-a269-9c7ac714c35b)
Product0852 0303 (76793551-27c7-52d3-8ec2-9bff01b7e610)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2021-20998 not_vulnerable 2026-06-08 05:29:11.039739 WAGO: Managed Switches: Unauthorized creation of user accounts
CRITICAL (10)
In multiple managed switches by WAGO in different versions without authorization and with specially crafted packets it is possible to create users.
Published: 2021-05-13T13:45:25.179Z
Updated: 2024-09-17T00:51:42.120Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-20997 not_vulnerable 2026-06-08 05:29:11.039036 WAGO: Managed Switches: Unauthorized access to password hashes
HIGH (7.5)
In multiple managed switches by WAGO in different versions it is possible to read out the password hashes of all Web-based Management users.
Published: 2021-05-13T13:45:25.054Z
Updated: 2024-09-16T23:42:19.095Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-20996 not_vulnerable 2026-06-08 05:29:11.038322 WAGO: Managed Switches: Unsecure Cookie settings
MEDIUM (5.3)
In multiple managed switches by WAGO in different versions special crafted requests can lead to cookies being transferred to third parties.
Published: 2021-05-13T13:45:24.938Z
Updated: 2024-09-16T23:15:25.537Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-20995 not_vulnerable 2026-06-08 05:29:11.037603 WAGO: Managed Switches: Storage of user credentials in a cookie
MEDIUM (5.3)
In multiple managed switches by WAGO in different versions the webserver cookies of the web based UI contain user credentials.
Published: 2021-05-13T13:45:24.828Z
Updated: 2024-09-17T04:24:28.648Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-20994 not_vulnerable 2026-06-08 05:29:11.036855 WAGO: Managed Switches: Reflected Cross-site Scripting
HIGH (8.8)
In multiple managed switches by WAGO in different versions an attacker may trick a legitimate user to click a link to inject possible malicious code into the Web-Based Management.
Published: 2021-05-13T13:45:24.684Z
Updated: 2024-09-17T01:16:25.472Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-20993 not_vulnerable 2026-06-08 05:29:11.030107 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.