Vulnerabilities > Wago > 0852 1305 000 001 Firmware > Medium

DATE CVE VULNERABILITY TITLE RISK
2021-05-13 CVE-2021-20993 Information Exposure vulnerability in Wago products
In multiple managed switches by WAGO in different versions the activated directory listing provides an attacker with the index of the resources located inside the directory.
network
low complexity
wago CWE-200
5.3
5.3
2021-05-13 CVE-2021-20994 Cross-site Scripting vulnerability in Wago products
In multiple managed switches by WAGO in different versions an attacker may trick a legitimate user to click a link to inject possible malicious code into the Web-Based Management.
network
low complexity
wago CWE-79
6.1
6.1
2021-05-13 CVE-2021-20996 Incorrect Permission Assignment for Critical Resource vulnerability in Wago products
In multiple managed switches by WAGO in different versions special crafted requests can lead to cookies being transferred to third parties.
network
low complexity
wago CWE-732
5.3
5.3