CVE-2021-34561

A vulnerability in WirelessHART-Gateway <= 3.0.8 allows to bypass any IP or firewall based access restrictions through DNS rebinding

State: Published
Severity: 7.5 High
Published: Aug 31, 2021
Updated: Sep 17, 2024
Reserved: Jun 10, 2021

Read the record on cve.org

Description

In PEPPERL+FUCHS WirelessHART-Gateway <= 3.0.8 serious issue exists, if the application is not externally accessible or uses IP-based access restrictions. Attackers can use DNS Rebinding to bypass any IP or firewall based access restrictions that may be in place, by proxying through their target's browser.

Scores

CVSS	Score	Vector	Source
3.1	7.5 High	CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H	CERTVDE

Weaknesses

CWE-350 Reliance on Reverse DNS Resolution for a Security-Critical Action

Affected Products

Product	Versions
WHA-GW-F2D2-0-AS- Z2-ETHPhoenix Contact	3.0.8 through 3.0.8Affected
WHA-GW-F2D2-0-AS- Z2-ETH.EIPPhoenix Contact	3.0.8 through 3.0.8Affected

References

https://cert.vde.com/en-us/advisories/vde-2021-027

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.