1. Home
  2. CVE Database
  3. CVE-2021-20993
MEDIUM · 5.3

CVE-2021-20993

In multiple managed switches by WAGO in different versions the activated directory listing provides an attacker with the index of the resources located inside the directory.

Vulnerability Description

In multiple managed switches by WAGO in different versions the activated directory listing provides an attacker with the index of the resources located inside the directory.

CVSS Score

5.3

MEDIUM

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality
LOW
Integrity
NONE
Availability
NONE

Affected Products

VendorProductVersions
Wago0852-0303 Firmware<= 1.2.3.s0
Wago0852-0303-
Wago0852-1305 Firmware<= 1.1.7.s0
Wago0852-1305-
Wago0852-1505 Firmware<= 1.1.6.s0
Wago0852-1505-
Wago0852-1305\/000-001 Firmware<= 1.0.4.s0
Wago0852-1305\/000-001-
Wago0852-1505\/000-001 Firmware<= 1.0.4.s0
Wago0852-1505\/000-001-

Related Weaknesses (CWE)

CWE-200

References

FAQ

What is CVE-2021-20993?

CVE-2021-20993 is a vulnerability with a CVSS score of 5.3 (MEDIUM). In multiple managed switches by WAGO in different versions the activated directory listing provides an attacker with the index of the resources located inside the directory.

How severe is CVE-2021-20993?

CVE-2021-20993 has been rated MEDIUM with a CVSS base score of 5.3/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2021-20993?

Check the references section above for vendor advisories and patch information. Affected products include: Wago 0852-0303 Firmware, Wago 0852-0303, Wago 0852-1305 Firmware, Wago 0852-1305, Wago 0852-1505 Firmware.