What’s Vulnerable › Vulnerabilities

CVE-2021-34560: A vulnerability in WirelessHART-Gateway <= 3.0.9 could lead to information exposure of sensitive information

• Severity: low (CVSS 2.1 v2.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.2% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2021-08-31 · updated 2026-06-17
• Weakness: CWE-522

Description

In PEPPERL+FUCHS WirelessHART-Gateway <= 3.0.9 a form contains a password field with autocomplete enabled. The stored credentials can be captured by an attacker who gains control over the user's computer. Therefore the user must have logged in at least once.

Affected products

• Pepperl-Fuchs Wha-Gw-F2D2-0-As-Z2-Eth.Eip Firmware: through 3.0.9
• Pepperl-Fuchs Wha-Gw-F2D2-0-As-Z2-Eth Firmware: through 3.0.9

References

• https://cert.vde.com/en-us/advisories/vde-2021-027
• https://cert.vde.com/en-us/advisories/vde-2021-027

Get alerted when CVE-2021-34560 or the next vulnerability affects your stack