CVE-2021-20999

WEIDMUELLER: Accidentally open network port in u-controls and IoT-Gateways

State: Published
Severity: 9.4 Critical
Published: May 13, 2021
Updated: Sep 17, 2024
Reserved: Dec 17, 2020

Description

In Weidmüller u-controls and IoT-Gateways in versions up to 1.12.1 a network port intended only for device-internal usage is accidentally accessible via external network interfaces. By exploiting this vulnerability the device may be manipulated or the operation may be stopped.

Scores

CVSS	Score	Vector	Source
3.1	9.4 Critical	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:H/A:H	CERTVDE

Weaknesses

CWE-668 Exposure of Resource to Wrong Sphere

Affected Products

Product	Versions
UC20-WL2000-AC (No. 1334950000)Weidmüller	1.3.0 through 1.9.0Affected 1.10.0 through 1.10.2Affected 1.11.0 through 1.12.1Affected
UC20-WL2000-IOT (No. 1334990000)Weidmüller	1.3.0 through 1.9.0Affected 1.10.0 through 1.10.2Affected 1.11.0 through 1.12.1Affected
IOT-GW30 (No. 2682620000)Weidmüller	1.3.0 through 1.9.0Affected 1.10.0 through 1.10.2Affected 1.11.0 through 1.12.1Affected
IOT-GW30-4G-EU (No. 2682630000)Weidmüller	1.3.0 through 1.9.0Affected 1.10.0 through 1.10.2Affected 1.11.0 through 1.12.1Affected

References

https://cert.vde.com/en-us/advisories/vde-2021-016

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.