CVE-2021-34562

Summary

In PEPPERL+FUCHS WirelessHART-Gateway 3.0.8 it is possible to inject arbitrary JavaScript into the application's response.

Affected Software

Weaknesses

• CWE-79: CWE-79 Cross-site Scripting (XSS)

Workarounds

An external protective measure is required.

• Minimize network exposure for affected products and ensure that they are not accessible via the Internet.
• Isolate affected products from the corporate network.
• If remote access is required, use secure methods such as virtual private networks (VPNs).

ADP Enrichment

CVE Program Container

Additional References

• https://cert.vde.com/en-us/advisories/vde-2021-027

References

• https://cert.vde.com/en-us/advisories/vde-2021-027

• ←Previous
• Next→