cbcvebase.
CVE-2021-34562
published 2021-08-31

CVE-2021-34562: In PEPPERL+FUCHS WirelessHART-Gateway 3.0.8 it is possible to inject arbitrary JavaScript into the application's response.

medium6.1CVSS 3.1
AVNACLPRNUIRSCCLILAN
In PEPPERL+FUCHS WirelessHART-Gateway 3.0.8 it is possible to inject arbitrary JavaScript into the application's response.

Affected

4 ranges
VendorProductVersion rangeFixed in
pepperl-fuchswha-gw-f2d2-0-as-z2-eth.eip_firmware
pepperl-fuchswha-gw-f2d2-0-as-z2-eth_firmware
phoenix_contactwha-gw-f2d2-0-as_z2-eth
phoenix_contactwha-gw-f2d2-0-as_z2-eth.eip