CVE-2021-34560 — A vulnerability in WirelessHART-Gateway <= 3.0.9 could lead to information exposure of sensitive information

CVE-2021-34560

A vulnerability in WirelessHART-Gateway <= 3.0.9 could lead to information exposure of sensitive information PUBLISHED

Description (CNA)

In PEPPERL+FUCHS WirelessHART-Gateway <= 3.0.9 a form contains a password field with autocomplete enabled. The stored credentials can be captured by an attacker who gains control over the user's computer. Therefore the user must have logged in at least once.

Affected (CNA)

Vendor / product	Versions
Phoenix Contact / WHA-GW-F2D2-0-AS- Z2-ETH	affected 3.0.9 through 3.0.9
Phoenix Contact / WHA-GW-F2D2-0-AS- Z2-ETH.EIP	affected 3.0.9 through 3.0.9

CWE

CWE-522

References

https://cert.vde.com/en-us/advisories/vde-2021-027

ADP enrichment

CVE

No English description supplied.

https://cert.vde.com/en-us/advisories/vde-2021-027