High severity8.8NVD Advisory· Published May 13, 2021· Updated Jun 17, 2026

CVE-2021-20994

Description

In multiple managed switches by WAGO in different versions an attacker may trick a legitimate user to click a link to inject possible malicious code into the Web-Based Management.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Wago/0852 0303 Firmware
cpe:2.3:o:wago:0852-0303_firmware:*:*:*:*:*:*:*:*
Range: <=1.2.3.s0
Wago/0852 1305\/000 001 Firmware
cpe:2.3:o:wago:0852-1305\/000-001_firmware:*:*:*:*:*:*:*:*
Range: <=1.0.4.s0
Wago/0852 1305 Firmware
cpe:2.3:o:wago:0852-1305_firmware:*:*:*:*:*:*:*:*
Range: <=1.1.7.s0
Wago/0852 1505\/000 001 Firmware
cpe:2.3:o:wago:0852-1505\/000-001_firmware:*:*:*:*:*:*:*:*
Range: <=1.0.4.s0
Wago/0852 1505 Firmware
cpe:2.3:o:wago:0852-1505_firmware:*:*:*:*:*:*:*:*
Range: <=1.1.6.s0
Wago/managed switchesllm-fuzzy
WAGO/0852-0303v5
Range: unspecified
Wago/852-1305cpe-rescue
Range: unspecified
WAGO/0852-1305/000-001v5
Range: unspecified
Wago/852-1505cpe-rescue
Range: unspecified
WAGO/0852-1505/000-001v5
Range: unspecified

cvss	0.572
epss	0.001
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000

CVE-2021-20994

Description

AI Insight

Affected products

Patches

Vulnerability mechanics

References

News mentions