CVE-2021-34561: A vulnerability in WirelessHART-Gateway <= 3.0.8 allows to bypass any IP or firewall based access restrictions through DNS rebinding

Severity: high (CVSS 8.8 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.9% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2021-08-31 · updated 2026-06-17
Weakness: CWE-350

Description

In PEPPERL+FUCHS WirelessHART-Gateway <= 3.0.8 serious issue exists, if the application is not externally accessible or uses IP-based access restrictions. Attackers can use DNS Rebinding to bypass any IP or firewall based access restrictions that may be in place, by proxying through their target's browser.

Affected products

Pepperl-Fuchs Wha-Gw-F2D2-0-As-Z2-Eth.Eip Firmware: through 3.0.8
Pepperl-Fuchs Wha-Gw-F2D2-0-As-Z2-Eth Firmware: through 3.0.8

References

https://cert.vde.com/en-us/advisories/vde-2021-027
https://cert.vde.com/en-us/advisories/vde-2021-027

Get alerted when CVE-2021-34561 or the next vulnerability affects your stack