CVE-2021-20996

MediumCVSS 5.3/10Last modified Jun 17, 2026

Description

In multiple managed switches by WAGO in different versions special crafted requests can lead to cookies being transferred to third parties.

Metrics

CVSS 3.1 5.3/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Weakness enumeration

CWE-732

Affected software

No affected versions have been published.

Timeline

Published
May 13, 2021
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2021

CVE-2021-209977.5In multiple managed switches by WAGO in different versions it is possible to read out the password hashes of all Web-based Management users.CVE-2021-209989.8In multiple managed switches by WAGO in different versions without authorization and with specially crafted packets it is possible to createCVE-2021-209999.8In Weidmüller u-controls and IoT-Gateways in versions up to 1.12.1 a network port intended only for device-internal usage is accidentally acCVE-2021-21009.1Vulnerability in the Oracle One-to-One Fulfillment product of Oracle E-Business Suite (component: Print Server). Supported versions that areCVE-2021-210007.5On WAGO PFC200 devices in different firmware versions with special crafted packets an attacker with network access to the device could causeCVE-2021-210016.5On WAGO PFC200 devices in different firmware versions with special crafted packets an authorised attacker with network access to the device CVE-2021-210027.5In Phoenix Contact FL COMSERVER UNI in versions < 2.40 a invalid Modbus exception response can lead to a temporary denial of service.CVE-2021-210035.3In Phoenix Contact FL SWITCH SMCS series products in multiple versions fragmented TCP-Packets may cause a Denial of Service of Web-, SNMP- aCVE-2021-210046.1In Phoenix Contact FL SWITCH SMCS series products in multiple versions an attacker may insert malicious code via LLDP frames into the web-baCVE-2021-210057.5In Phoenix Contact FL SWITCH SMCS series products in multiple versions if an attacker sends a hand-crafted TCP-Packet with the Urgent-Flag sCVE-2021-210068.6Adobe Photoshop version 22.1 (and earlier) is affected by a heap buffer overflow vulnerability when handling a specially crafted font file. CVE-2021-210077.0Adobe Illustrator version 25.0 (and earlier) is affected by an uncontrolled search path element that could result in arbitrary code executio
CVE-2021-20996: Medium severity, CVSS 5.3 | Vulnix