CVE-2021-46388

 

Published at: - 16-02-2022 12:15

Last modified: - 02-03-2022 05:15

Total changes: - 4

Description

** DISPUTED ** WAGO 750-8212 PFC200 G2 2ETH RS Firmware version 03.05.10(17) is affected by a privilege escalation vulnerability. Improper handling of user cookies leads to escalating privileges to administrative account of the router. NOTE: analysis by a security team (on behalf of the vendor) indicates that an attacker could only view data that is already publicly available, could not modify data, and could not obtain other access or interfere with the operation of the device.

Common Vulnerability Scoring System (CVSS)

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

 

Verification logic

 

Reference

• https://drive.google.com/drive/folders/1FDtxZayLeSITcqP72c7FsTOpAFGFePVE
• http://packetstormsecurity.com/files/166159/WAGO-750-8212-PFC200-G2-2ETH-RS-Privilege-Escalation.html

 

Keywords

NVD

 

CVE-2021-46388

 

CVE

 

Common vulnerabilities & exposures

 

CVSS

 

Common vulnerability scoring system

 

Security

 

Vulnerabilities

 

Exposures