PT-2021-14328 · Weidmüller · Weidmüller U-Controls+1

Published 2021-05-13 · Updated 2022-10-21 · CVE-2021-20999

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions: Weidmüller u-controls and IoT-Gateways versions up to 1.12.1

Description: A network port intended for device-internal usage is accidentally accessible via external network interfaces, allowing the device to be manipulated or its operation to be stopped.

Recommendations: For Weidmüller u-controls and IoT-Gateways versions up to 1.12.1, update to a version later than 1.12.1 to resolve the issue. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exposure of Resource to Wrong Sphere

Weakness Enumeration

CWE-668

Related Identifiers

CVE-2021-20999

Affected Products

Iot-Gateways

Weidmüller U-Controls

References · 4

• https://osv.dev/vulnerability/CVE-2021-20999 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2021-20999 · Security Note
• https://t.me/cvenotify/14382 · Telegram Post
• https://cert.vde.com/en-us/advisories/vde-2021-016 · Note