CVE-2021-20998
9.8 criticalEPSS 1.1%
Critical (9.8) in wago. EPSS 1.1% chance of exploitation in the next 30 days.
In multiple managed switches by WAGO in different versions without authorization and with specially crafted packets it is possible to create users.
Severity
CVSS 3.1
9.8 criticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H- EPSS
- 1.1% chance of exploitation in the next 30 days; higher than 65% of CVEs (scores of 2026-10-31)
- CWE
- CWE-306
- Published
- Modified
- Record from
- the NVD, synced
Affected
- wago:0852-0303_firmware
- wago:0852-1305\/000-001_firmware
- wago:0852-1305_firmware
- wago:0852-1505\/000-001_firmware
- wago:0852-1505_firmware
References
Check your stackJSON