Weidmueller: Accidentally open network port in u-controls and IoT-Gateways
A network port intended only for device-internal usage is accidentally accessible via external network interfaces.
describes (1)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2021-20999US | critical9.8 | — | ||
In Weidmüller u-controls and IoT-Gateways in versions up to 1.12.1 a network port intended only for device-internal usage is accidentally accessible via external network interfaces… | ||||
references
External citations — patches, advisories, analysis.
remediations (2)
- Mitigation
Restrict access to the network th device is connected to Do not directly connect the device to the internet
- Fixed
Weidmüller recommends upgrading affected devices to the current firmware version 1.12.3 or higher which fixes this vulnerability. Alternatively the following firmware versions which fix this vulnerability may be installed: | **Product** | **Affected (installed) firmware version** | **Fixed firmware version** | |-----------------------|-----------------------------------------------|--------------------------------| | Any affected product | 1.3.0 - 1.9.0 | 1.9.1 | | Any affected product | 1.10.1, 1.10.2 | 1.10.3 | | Any affected product | 1.10.0, 1.11.0, 1.12.1 | 1.12.3 |
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan