1. Home
  2. CVE Database
  3. CVE-2021-20996
MEDIUM · 5.3

CVE-2021-20996

In multiple managed switches by WAGO in different versions special crafted requests can lead to cookies being transferred to third parties.

Vulnerability Description

In multiple managed switches by WAGO in different versions special crafted requests can lead to cookies being transferred to third parties.

CVSS Score

5.3

MEDIUM

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality
LOW
Integrity
NONE
Availability
NONE

Affected Products

VendorProductVersions
Wago0852-0303 Firmware<= 1.2.3.s0
Wago0852-0303-
Wago0852-1305 Firmware<= 1.1.7.s0
Wago0852-1305-
Wago0852-1505 Firmware<= 1.1.6.s0
Wago0852-1505-
Wago0852-1305\/000-001 Firmware<= 1.0.4.s0
Wago0852-1305\/000-001-
Wago0852-1505\/000-001 Firmware<= 1.0.4.s0
Wago0852-1505\/000-001-

Related Weaknesses (CWE)

CWE-732

References

FAQ

What is CVE-2021-20996?

CVE-2021-20996 is a vulnerability with a CVSS score of 5.3 (MEDIUM). In multiple managed switches by WAGO in different versions special crafted requests can lead to cookies being transferred to third parties.

How severe is CVE-2021-20996?

CVE-2021-20996 has been rated MEDIUM with a CVSS base score of 5.3/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2021-20996?

Check the references section above for vendor advisories and patch information. Affected products include: Wago 0852-0303 Firmware, Wago 0852-0303, Wago 0852-1305 Firmware, Wago 0852-1305, Wago 0852-1505 Firmware.