← CVE Intelligence

CVE-2021-20994

WAGO: Managed Switches: Reflected Cross-site Scripting PUBLISHED

Description (CNA)

In multiple managed switches by WAGO in different versions an attacker may trick a legitimate user to click a link to inject possible malicious code into the Web-Based Management.

Affected (CNA)

Vendor / productVersions
WAGO / 0852-0303affected unspecified through V1.2.3.S0
WAGO / 0852-1305affected unspecified through V1.1.7.S0
WAGO / 0852-1505affected unspecified through V1.1.6.S0
WAGO / 0852-1305/000-001affected unspecified through V1.0.4.S0
WAGO / 0852-1505/000-001affected unspecified through V1.0.4.S0

CWE

CWE-79

References

ADP enrichment

CVE

No English description supplied.