CVE-2021-34560

5.5 mediumEPSS 0.2%

Medium (5.5) in pepperl-fuchs. EPSS 0.2% chance of exploitation in the next 30 days.

In PEPPERL+FUCHS WirelessHART-Gateway <= 3.0.9 a form contains a password field with autocomplete enabled. The stored credentials can be captured by an attacker who gains control over the user's computer. Therefore the user must have logged in at least once.

Severity

CVSS 3.1

5.5 medium

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N

EPSS: 0.2% chance of exploitation in the next 30 days; higher than 10% of CVEs (scores of 2026-10-31)
CWE: CWE-522
Published: 2021-08-31
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

pepperl-fuchs:wha-gw-f2d2-0-as-z2-eth.eip_firmware
pepperl-fuchs:wha-gw-f2d2-0-as-z2-eth_firmware

References

https://cert.vde.com/en-us/advisories/vde-2021-027
https://cert.vde.com/en-us/advisories/vde-2021-027

Check your stack JSON