Vulnerability Details CVE-2021-20999
In Weidmüller u-controls and IoT-Gateways in versions up to 1.12.1 a network port intended only for device-internal usage is accidentally accessible via external network interfaces. By exploiting this vulnerability the device may be manipulated or the operation may be stopped.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.004
EPSS Ranking 59.8%
CVSS Severity
CVSS v3 Score 9.4
CVSS v2 Score 7.5
Products affected by CVE-2021-20999
-
cpe:2.3:h:weidmueller:iot-gw30-4g-eu:-
-
cpe:2.3:h:weidmueller:iot-gw30:-
-
cpe:2.3:h:weidmueller:uc20-wl2000-ac:-
-
cpe:2.3:h:weidmueller:uc20-wl2000-iot:-
-
cpe:2.3:o:weidmueller:iot-gw30-4g-eu_firmware:1.10.0
-
cpe:2.3:o:weidmueller:iot-gw30-4g-eu_firmware:1.10.1
-
cpe:2.3:o:weidmueller:iot-gw30-4g-eu_firmware:1.10.2
-
cpe:2.3:o:weidmueller:iot-gw30-4g-eu_firmware:1.11.0
-
cpe:2.3:o:weidmueller:iot-gw30-4g-eu_firmware:1.12.1
-
cpe:2.3:o:weidmueller:iot-gw30-4g-eu_firmware:1.3.0
-
cpe:2.3:o:weidmueller:iot-gw30-4g-eu_firmware:1.9.0
-
cpe:2.3:o:weidmueller:iot-gw30_firmware:1.10.0
-
cpe:2.3:o:weidmueller:iot-gw30_firmware:1.10.1
-
cpe:2.3:o:weidmueller:iot-gw30_firmware:1.10.2
-
cpe:2.3:o:weidmueller:iot-gw30_firmware:1.11.0
-
cpe:2.3:o:weidmueller:iot-gw30_firmware:1.12.1
-
cpe:2.3:o:weidmueller:iot-gw30_firmware:1.3.0
-
cpe:2.3:o:weidmueller:iot-gw30_firmware:1.9.0
-
cpe:2.3:o:weidmueller:uc20-wl2000-ac_firmware:1.10.0
-
cpe:2.3:o:weidmueller:uc20-wl2000-ac_firmware:1.10.1
-
cpe:2.3:o:weidmueller:uc20-wl2000-ac_firmware:1.10.2
-
cpe:2.3:o:weidmueller:uc20-wl2000-ac_firmware:1.11.0
-
cpe:2.3:o:weidmueller:uc20-wl2000-ac_firmware:1.12.1
-
cpe:2.3:o:weidmueller:uc20-wl2000-ac_firmware:1.3.0
-
cpe:2.3:o:weidmueller:uc20-wl2000-ac_firmware:1.3.1
-
cpe:2.3:o:weidmueller:uc20-wl2000-iot_firmware:1.10.0
-
cpe:2.3:o:weidmueller:uc20-wl2000-iot_firmware:1.10.1
-
cpe:2.3:o:weidmueller:uc20-wl2000-iot_firmware:1.10.2
-
cpe:2.3:o:weidmueller:uc20-wl2000-iot_firmware:1.11.0
-
cpe:2.3:o:weidmueller:uc20-wl2000-iot_firmware:1.12.1
-
cpe:2.3:o:weidmueller:uc20-wl2000-iot_firmware:1.3.0
-
cpe:2.3:o:weidmueller:uc20-wl2000-iot_firmware:1.3.1