PHOENIX CONTACT WHA-GW-F2D2-0-AS- Z2-ETH.EIP

• CVE-2021-34565 Critical 9.8 In WirelessHART-Gateway versions 3.0.7 to 3.0.9 hard-coded credentials have been found 1.0%
• CVE-2021-34564 Medium 5.5 In WirelessHART-Gateway versions 3.0.9 a vulnerability allows to read and write sensitive data in a cookie 0.2%
• CVE-2021-34563 Low 3.3 In WirelessHART-Gateway versions 3.0.8 and 3.0.9 the HttpOnly flag is missing in a cookie which allows client-side javascript to modify it 0.2%
• CVE-2021-34562 Medium 5.4 A vulnerability in WirelessHART-Gateway 3.0.8 it is possible to inject arbitrary JavaScript into the application's response 0.6%
• CVE-2021-34561 High 7.5 A vulnerability in WirelessHART-Gateway <= 3.0.8 allows to bypass any IP or firewall based access restrictions through DNS rebinding 0.9%
• CVE-2021-34560 Medium 5.5 A vulnerability in WirelessHART-Gateway <= 3.0.9 could lead to information exposure of sensitive information 0.2%
• CVE-2021-34559 Medium 5.4 A vulnerability in WirelessHART-Gateway <= 3.0.8 may allow remote attackers to rewrite links and URLs in cached pages to arbitrary strings 0.8%
• CVE-2021-33555 High 7.5 A vulnerability may allow remote attackers to read arbitrary files on the server of the WirelessHART-Gateway 1.2%