Weidmueller UC20-WL2000-IoT Firmware vulnerabilities

2 CVEs affecting Weidmueller UC20-WL2000-IoT Firmware, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2022-3073, published 2022-12-14.

More from Weidmueller.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2021-20999, published 2021-05-13. Critical severity, CVSS 9.8. EPSS: 0.9% chance of exploitation in the next 30 days. In Weidmüller u-controls and IoT-Gateways in versions up to 1.12.1 a network port intended only for device-internal usage is accidentally accessible via external network interfaces. By exploiting…
• CVE-2022-3073, published 2022-12-14. Medium severity, CVSS 6.1. EPSS: 0.5% chance of exploitation in the next 30 days. Quanos "SCHEMA ST4" example web templates in version Bootstrap 2019 v2/2021 v1/2022 v1/2022 SP1 v1 or below are prone to JavaScript injection allowing a remote attacker to hijack existing sessions to…