CVE-2021-34560: Pepperl-Fuchs Wha-Gw-f2d2-0-As-z2-Eth.eip Firmware

Medium severity, CVSS 5.5. EPSS: 0.2% chance of exploitation in the next 30 days.

In PEPPERL+FUCHS WirelessHART-Gateway <= 3.0.9 a form contains a password field with autocomplete enabled. The stored credentials can be captured by an attacker who gains control over the user's computer. Therefore the user must have logged in at least once.

Affected products

• Pepperl-Fuchs Wha-Gw-f2d2-0-As-z2-Eth.eip Firmware: up to and including 3.0.9
• Pepperl-Fuchs Wha-Gw-f2d2-0-As-z2-Eth Firmware: up to and including 3.0.9

Published 2021-08-31. Last modified 2026-06-17.