← Database
CVE-2021-34563
LOW
CVSS: 3.3
Published: 2021-08-31
Modified: 2026-06-17
Description
In PEPPERL+FUCHS WirelessHART-Gateway 3.0.8 and 3.0.9 the HttpOnly attribute is not set on a cookie. This allows the cookie's value to be read or set by client-side JavaScript.
Affected Platforms
Pepperl-Fuchs Wha-Gw-F2D2-0-As-Z2-Eth FirmwarePepperl-Fuchs Wha-Gw-F2D2-0-As-Z2-Eth.EipPepperl-Fuchs Wha-Gw-F2D2-0-As-Z2-EthPepperl-Fuchs Wha-Gw-F2D2-0-As-Z2-Eth.Eip Firmware