What is CVE-2021-21001?

CVE-2021-21001 is a critical-severity vulnerability in Wago 750-8202, classified under Path Traversal. CVSS score: 9.1/10. Published 2021-05-24.

How severe is CVE-2021-21001?

Critical severity. CVSS v3 base score is 9.1 out of 10.

Path Traversal in Wago 750-8202

CVE-2021-21001

On WAGO PFC200 devices in different firmware versions with special crafted packets an authorised attacker with network access to the device can access the file system with higher privileges.

Vulnerability class: Path Traversal (Directory Traversal)

EPSS: 0.011 (62.5th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 9.1 (Critical). Vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H.

Affected products

Wago 750-8202
Wago 750-8202_firmware
Wago 750-8203
Wago 750-8203_firmware
Wago 750-8204
Wago 750-8204_firmware
Wago 750-8206
Wago 750-8206_firmware
Wago 750-8207
Wago 750-8207_firmware

Weakness classification (CWE)

CWE-22 — Path Traversal

References

info@cert.vde.com (x_refsource_CONFIRM, Third Party Advisory)

Frequently asked questions

What is CVE-2021-21001?: CVE-2021-21001 is a critical-severity vulnerability in Wago 750-8202, classified under Path Traversal. CVSS score: 9.1/10. Published 2021-05-24.
How severe is CVE-2021-21001?: Critical severity. CVSS v3 base score is 9.1 out of 10.