CVE-2021-34565
In WirelessHART-Gateway versions 3.0.7 to 3.0.9 hard-coded credentials have been found
Severity Score
9.8
*CVSS v3.1
Exploit Likelihood
*EPSS
Affected Versions
*CPE
Public Exploits
0
*Multiple Sources
Exploited in Wild
-
*KEV
Decision
-
*SSVC
Descriptions
In PEPPERL+FUCHS WirelessHART-Gateway 3.0.7 to 3.0.9 the SSH and telnet services are active with hard-coded credentials.
En PEPPERL+FUCHS WirelessHART-Gateway versiones 3.0.7 hasta 3.0.9, los servicios SSH y telnet están activos con credenciales embebidas
*Credits:
Pepperl+Fuchs reported this vulnerability. CERT@VDE coordinated.
CVSS Scores
Attack Vector
Attack Complexity
Privileges Required
User Interaction
Scope
Confidentiality
Integrity
Availability
Attack Vector
Attack Complexity
Authentication
Confidentiality
Integrity
Availability
* Common Vulnerability Scoring System
SSVC
- Decision:-
Exploitation
Automatable
Tech. Impact
* Organization's Worst-case Scenario
Timeline
- 2021-06-10 CVE Reserved
- 2021-08-31 CVE Published
- 2024-05-01 EPSS Updated
- 2024-09-17 CVE Updated
- ---------- Exploited in Wild
- ---------- KEV Due Date
- ---------- First Exploit
CWE
- CWE-798: Use of Hard-coded Credentials
CAPEC
References (1)
| URL | Tag | Source |
|---|---|---|
| https://cert.vde.com/en-us/advisories/vde-2021-027 | Third Party Advisory |
| URL | Date | SRC |
|---|
| URL | Date | SRC |
|---|
| URL | Date | SRC |
|---|
Affected Vendors, Products, and Versions
| Vendor | Product | Version | Other | Status | ||||||
|---|---|---|---|---|---|---|---|---|---|---|
| Vendor | Product | Version | Other | Status | <-- --> | Vendor | Product | Version | Other | Status |
| Pepperl-fuchs Search vendor "Pepperl-fuchs" | Wha-gw-f2d2-0-as-z2-eth Firmware Search vendor "Pepperl-fuchs" for product "Wha-gw-f2d2-0-as-z2-eth Firmware" | >= 3.0.7 <= 3.0.9 Search vendor "Pepperl-fuchs" for product "Wha-gw-f2d2-0-as-z2-eth Firmware" and version " >= 3.0.7 <= 3.0.9" | - |
Affected
| in | Pepperl-fuchs Search vendor "Pepperl-fuchs" | Wha-gw-f2d2-0-as-z2-eth Search vendor "Pepperl-fuchs" for product "Wha-gw-f2d2-0-as-z2-eth" | - | - |
Safe
|
| Pepperl-fuchs Search vendor "Pepperl-fuchs" | Wha-gw-f2d2-0-as-z2-eth.eip Firmware Search vendor "Pepperl-fuchs" for product "Wha-gw-f2d2-0-as-z2-eth.eip Firmware" | >= 3.0.7 <= 3.0.9 Search vendor "Pepperl-fuchs" for product "Wha-gw-f2d2-0-as-z2-eth.eip Firmware" and version " >= 3.0.7 <= 3.0.9" | - |
Affected
| in | Pepperl-fuchs Search vendor "Pepperl-fuchs" | Wha-gw-f2d2-0-as-z2-eth.eip Search vendor "Pepperl-fuchs" for product "Wha-gw-f2d2-0-as-z2-eth.eip" | - | - |
Safe
|