CVE-2021-34561: A vulnerability in WirelessHART-Gateway <= 3.0.8 allows to bypass any IP or firewall based access restrictions through DNS rebinding
In PEPPERL+FUCHS WirelessHART-Gateway <= 3.0.8 serious issue exists, if the application is not externally accessible or uses IP-based access restrictions. Attackers can use DNS Rebinding to bypass any IP or firewall based access restrictions that may be in place, by proxying through their target's browser.
Affected Software
Remediation
Information
Event History
Frequently Asked Questions
What is CVE-2021-34561?
CVE-2021-34561 is a serious vulnerability in PEPPERL+FUCHS WirelessHART-Gateway <= 3.0.8 that allows attackers to bypass IP or firewall-based access restrictions using DNS Rebinding.
How does CVE-2021-34561 affect PEPPERL+FUCHS WirelessHART-Gateway?
CVE-2021-34561 affects PEPPERL+FUCHS WirelessHART-Gateway <= 3.0.8 if the application is not externally accessible or uses IP-based access restrictions.
What is the severity of CVE-2021-34561?
CVE-2021-34561 has a severity rating of 8.8 (high).
What is DNS Rebinding?
DNS Rebinding is an attack technique where an attacker uses DNS to bypass IP or firewall-based access restrictions by making the victim's browser establish a connection to a malicious website.
Where can I find more information about CVE-2021-34561?
You can find more information about CVE-2021-34561 at the following reference: https://cert.vde.com/en-us/advisories/vde-2021-027