CVE-2021-34561 : faille élevée pepperl-fuchs wha-gw-f2d2-0-as-z2-eth… (CVSS 8.8)

In PEPPERL+FUCHS WirelessHART-Gateway <= 3.0.8 serious issue exists, if the application is not externally accessible or uses IP-based access restrictions. Attackers can use DNS Rebinding to bypass any IP or firewall based access restrictions that may be in place, by proxying through their target's browser.

Sévérité

Élevée (CVSS 8.8)

Vecteur CVSS

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Exploitation active

Non signalée par la CISA

Publication

31 août 2021

Dernière mise à jour

17 juin 2026

• pepperl-fuchs wha-gw-f2d2-0-as-z2-eth firmware
• pepperl-fuchs wha-gw-f2d2-0-as-z2-eth.eip firmware

• Fiche CVE-2021-34561 sur le NVD (NIST)
• cert.vde.com/en-us/advisories/vde-2021-027