CVE-2021-20999: Weidmüller UC20-WL2000-AC (No. 1334950000), друго

Описание

Оригинално описание

In Weidmüller u-controls and IoT-Gateways in versions up to 1.12.1 a network port intended only for device-internal usage is accidentally accessible via external network interfaces. By exploiting this vulnerability the device may be manipulated or the operation may be stopped.

Засегнати продукти

• Weidmüller UC20-WL2000-AC (No. 1334950000): 1.3.0 до 1.9.0; 1.10.0 до 1.10.2; 1.11.0 до 1.12.1
• Weidmüller UC20-WL2000-IOT (No. 1334990000): 1.3.0 до 1.9.0; 1.10.0 до 1.10.2; 1.11.0 до 1.12.1
• Weidmüller IOT-GW30 (No. 2682620000): 1.3.0 до 1.9.0; 1.10.0 до 1.10.2; 1.11.0 до 1.12.1
• Weidmüller IOT-GW30-4G-EU (No. 2682630000): 1.3.0 до 1.9.0; 1.10.0 до 1.10.2; 1.11.0 до 1.12.1

Вид слабост

• CWE-668 Exposure of Resource to Wrong Sphere

История

Първоизточници

• https://www.cve.org/CVERecord?id=CVE-2021-20999
• https://nvd.nist.gov/vuln/detail/CVE-2021-20999
• https://cert.vde.com/en-us/advisories/vde-2021-016