Pepperl+Fuchs WHA-GW-F2D2-0-AS-Z2-ETH.EIP
Approved changes feed: RSS · Atom
cpe:2.3:h:pepperl-fuchs:wha-gw-f2d2-0-as-z2-eth.eip:-:*:*:*:*:*:*:*
part: h version: - update: *
| Vendor | Pepperl Fuchs (e3b9f77f-bbd3-5de6-9c60-99bdc7a2e39b) |
|---|---|
| Product | Wha Gw F2D2 0 As Z2 Eth.Eip (d345b1e0-8ac7-5bc5-942a-c3095d5e68a9) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from NVD CPE 2.0 feed |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2021-34565 |
not_vulnerable | 2026-06-08 05:32:13.798909 |
In WirelessHART-Gateway versions 3.0.7 to 3.0.9 hard-coded credentials have been found
CRITICAL (9.8)
In PEPPERL+FUCHS WirelessHART-Gateway 3.0.7 to 3.0.9 the SSH and telnet services are active with hard-coded credentials.
Published: 2021-08-31T10:33:00.698Z
Updated: 2024-09-17T03:22:29.106Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-34563 |
not_vulnerable | 2026-06-08 05:32:13.796671 |
In WirelessHART-Gateway versions 3.0.8 and 3.0.9 the HttpOnly flag is missing in a cookie which allows client-side javascript to modify it
LOW (3.3)
In PEPPERL+FUCHS WirelessHART-Gateway 3.0.8 and 3.0.9 the HttpOnly attribute is not set on a cookie. This allows the cookie's value to be read or set by client-side JavaScript.
Published: 2021-08-31T10:32:58.577Z
Updated: 2024-09-17T04:14:32.706Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-34562 |
not_vulnerable | 2026-06-08 05:32:13.793369 |
A vulnerability in WirelessHART-Gateway 3.0.8 it is possible to inject arbitrary JavaScript into the application's response
MEDIUM (5.4)
In PEPPERL+FUCHS WirelessHART-Gateway 3.0.8 it is possible to inject arbitrary JavaScript into the application's response.
Published: 2021-08-31T10:32:57.523Z
Updated: 2024-09-17T00:56:48.045Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-34561 |
not_vulnerable | 2026-06-08 05:32:13.789583 |
A vulnerability in WirelessHART-Gateway <= 3.0.8 allows to bypass any IP or firewall based access restrictions through DNS rebinding
HIGH (7.5)
In PEPPERL+FUCHS WirelessHART-Gateway <= 3.0.8 serious issue exists, if the application is not externally accessible or uses IP-based access restrictions. Attackers can use DNS Rebinding to bypass any IP or firewall based access restrictions that may be in place, by proxying through their target's browser.
Published: 2021-08-31T10:32:56.470Z
Updated: 2024-09-17T01:56:32.573Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-34560 |
not_vulnerable | 2026-06-08 05:32:13.789086 |
A vulnerability in WirelessHART-Gateway <= 3.0.9 could lead to information exposure of sensitive information
MEDIUM (5.5)
In PEPPERL+FUCHS WirelessHART-Gateway <= 3.0.9 a form contains a password field with autocomplete enabled. The stored credentials can be captured by an attacker who gains control over the user's computer. Therefore the user must have logged in at least once.
Published: 2021-08-31T10:32:55.386Z
Updated: 2024-09-16T23:00:54.389Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-34559 |
not_vulnerable | 2026-06-08 05:32:13.788498 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.