Iot\-Gw30_firmware - Vulncode-DB

Repositories	Unknown: This might be proprietary software.
#Vulnerabilities	2

Date	Id	Summary	Products	Score	Patch	Annotated
2021-05-13	CVE-2021-20999	In Weidmüller u-controls and IoT-Gateways in versions up to 1.12.1 a network port intended only for device-internal usage is accidentally accessible via external network interfaces. By exploiting this vulnerability the device may be manipulated or the operation may be stopped.	Iot\-Gw30\-4g\-Eu_firmware, Iot\-Gw30_firmware, Uc20\-Wl2000\-Ac_firmware, Uc20\-Wl2000\-Iot_firmware	9.8
2022-12-14	CVE-2022-3073	Quanos "SCHEMA ST4" example web templates in version Bootstrap 2019 v2/2021 v1/2022 v1/2022 SP1 v1 or below are prone to JavaScript injection allowing a remote attacker to hijack existing sessions to e.g. other web services in the same environment or execute scripts in the users browser environment. The affected script is '*-schema.js'.	19_iot_md01_lan_h4_s0011_firmware, Fp_iot_md01_4eu_s2_00000_firmware, Fp_iot_md01_lan_s2_00000_firmware, Fp_iot_md01_lan_s2_00011_firmware, Fp_iot_md02_4eu_s3_00000_firmware, Iot\-Gw30\-4g\-Eu_firmware, Iot\-Gw30_firmware, Uc20\-Wl2000\-Ac_firmware, Uc20\-Wl2000\-Iot_firmware	N/A