CVE-2021-20998

CriticalCVSS 9.8/10Last modified Jun 17, 2026

Description

In multiple managed switches by WAGO in different versions without authorization and with specially crafted packets it is possible to create users.

Metrics

CVSS 3.1 9.8/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-306

Affected software

No affected versions have been published.

Timeline

Published
May 13, 2021
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2021

CVE-2021-209999.8In Weidmüller u-controls and IoT-Gateways in versions up to 1.12.1 a network port intended only for device-internal usage is accidentally acCVE-2021-21009.1Vulnerability in the Oracle One-to-One Fulfillment product of Oracle E-Business Suite (component: Print Server). Supported versions that areCVE-2021-210007.5On WAGO PFC200 devices in different firmware versions with special crafted packets an attacker with network access to the device could causeCVE-2021-210016.5On WAGO PFC200 devices in different firmware versions with special crafted packets an authorised attacker with network access to the device CVE-2021-210027.5In Phoenix Contact FL COMSERVER UNI in versions < 2.40 a invalid Modbus exception response can lead to a temporary denial of service.CVE-2021-210035.3In Phoenix Contact FL SWITCH SMCS series products in multiple versions fragmented TCP-Packets may cause a Denial of Service of Web-, SNMP- aCVE-2021-210046.1In Phoenix Contact FL SWITCH SMCS series products in multiple versions an attacker may insert malicious code via LLDP frames into the web-baCVE-2021-210057.5In Phoenix Contact FL SWITCH SMCS series products in multiple versions if an attacker sends a hand-crafted TCP-Packet with the Urgent-Flag sCVE-2021-210068.6Adobe Photoshop version 22.1 (and earlier) is affected by a heap buffer overflow vulnerability when handling a specially crafted font file. CVE-2021-210077.0Adobe Illustrator version 25.0 (and earlier) is affected by an uncontrolled search path element that could result in arbitrary code executioCVE-2021-210087.0Adobe Animate version 21.0 (and earlier) is affected by an uncontrolled search path element that could result in arbitrary code execution inCVE-2021-210098.6Adobe Campaign Classic Gold Standard 10 (and earlier), 20.3.1 (and earlier), 20.2.3 (and earlier), 20.1.3 (and earlier), 19.2.3 (and earlier
CVE-2021-20998: Critical severity, CVSS 9.8 | Vulnix