CVE-2021-34563: Pepperl-Fuchs Wha-Gw-f2d2-0-As-z2-Eth.eip Firmware

Low severity, CVSS 3.3. EPSS: 0.2% chance of exploitation in the next 30 days.

In PEPPERL+FUCHS WirelessHART-Gateway 3.0.8 and 3.0.9 the HttpOnly attribute is not set on a cookie. This allows the cookie's value to be read or set by client-side JavaScript.

Affected products

• Pepperl-Fuchs Wha-Gw-f2d2-0-As-z2-Eth.eip Firmware: version 3.0.8 only; version 3.0.9 only
• Pepperl-Fuchs Wha-Gw-f2d2-0-As-z2-Eth Firmware: version 3.0.8 only; version 3.0.9 only

Published 2021-08-31. Last modified 2026-06-17.