CVE-2021-34561

Katalog CVE

CVSS 8.8 · High EPSS 0,87%

Kerentanan Reliance on Reverse DNS Resolution for a Security-Critical Action pada pepperl-fuchs wha-gw-f2d2-0-as-z2-eth firmware, pepperl-fuchs wha-gw-f2d2-0-as-z2-eth.eip firmware. Skor CVSS 3.1 8.8 (High) menurut NVD.

Deskripsi (NVD)

In PEPPERL+FUCHS WirelessHART-Gateway <= 3.0.8 serious issue exists, if the application is not externally accessible or uses IP-based access restrictions. Attackers can use DNS Rebinding to bypass any IP or firewall based access restrictions that may be in place, by proxying through their target's browser.

Rincian

Terbit di NVD

31 Agustus 2021

Terakhir diubah

17 Juni 2026

Status NVD

Modified

CVSS 3.1

8.8 (High), sumber NVD
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-350: Reliance on Reverse DNS Resolution for a Security-Critical Action

EPSS (30 hari)

0,87% peluang dieksploitasi; lebih tinggi dari 57,6% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://cert.vde.com/en-us/advisories/vde-2021-027 advisory pihak ketiga