Critical severity10.0NVD Advisory· Published May 13, 2021· Updated Jun 17, 2026

CVE-2021-20998

Description

In multiple managed switches by WAGO in different versions without authorization and with specially crafted packets it is possible to create users.

LLM-synthesized narrative grounded in this CVE's description and references.

Wago/0852 0303 Firmware
cpe:2.3:o:wago:0852-0303_firmware:*:*:*:*:*:*:*:*
Range: <=1.2.3.s0
Wago/0852 1305\/000 001 Firmware
cpe:2.3:o:wago:0852-1305\/000-001_firmware:*:*:*:*:*:*:*:*
Range: <=1.0.4.s0
Wago/0852 1305 Firmware
cpe:2.3:o:wago:0852-1305_firmware:*:*:*:*:*:*:*:*
Range: <=1.1.7.s0
Wago/0852 1505\/000 001 Firmware
cpe:2.3:o:wago:0852-1505\/000-001_firmware:*:*:*:*:*:*:*:*
Range: <=1.0.4.s0
Wago/0852 1505 Firmware
cpe:2.3:o:wago:0852-1505_firmware:*:*:*:*:*:*:*:*
Range: <=1.1.6.s0
Wago/managed switchesllm-fuzzy
WAGO/0852-0303v5
Range: unspecified
Wago/852-1305cpe-rescue
Range: unspecified
WAGO/0852-1305/000-001v5
Range: unspecified
Wago/852-1505cpe-rescue
Range: unspecified
WAGO/0852-1505/000-001v5
Range: unspecified