How severe is CVE-2021-34561?

CVE-2021-34561 has a CVSS 3.x base score of 7.5, rated high severity. It is exploitable over network with high attack complexity, requires no privileges and user interaction. Impact on confidentiality is high, integrity high, and availability high.

Is CVE-2021-34561 being actively exploited?

It is not currently listed in CISA's KEV catalog. Its EPSS exploit-prediction score is 1% (54th percentile), an estimate of the probability of exploitation in the next 30 days.

What products are affected by CVE-2021-34561?

CVE-2021-34561 primarily affects Pepperl-fuchs Wha-gw-f2d2-0-as-z2-eth Firmware. In total, 2 product configurations (CPEs) are listed as vulnerable; see the affected-products list for the exact versions.

How do I fix CVE-2021-34561?

Review the linked vendor and NVD advisories for patched versions and mitigations, then upgrade or apply the recommended workaround. Given its high severity, prioritise patching exposed systems.

When was CVE-2021-34561 published?

CVE-2021-34561 was published on 2021-08-31 and last updated on 2026-06-17.

CVE-2021-34561

CVE-2021-34561 is a high-severity vulnerability in Pepperl-fuchs Wha-gw-f2d2-0-as-z2-eth Firmware with a CVSS 3.x base score of 7.5. It is not currently listed as actively exploited by CISA, and its EPSS exploit-prediction score is low. The underlying weakness is classified as CWE-350.

Key facts

Severity: High (CVSS 3.x base score 7.5)
CVSS v2: 6.8
EPSS exploit prediction: 1% (54th percentile)
Actively exploited: Not listed in CISA KEV
Weakness: CWE-350
Affected product: Pepperl-fuchs Wha-gw-f2d2-0-as-z2-eth Firmware
Published: 2021-08-31
Last modified: 2026-06-17

Description

In PEPPERL+FUCHS WirelessHART-Gateway <= 3.0.8 serious issue exists, if the application is not externally accessible or uses IP-based access restrictions. Attackers can use DNS Rebinding to bypass any IP or firewall based access restrictions that may be in place, by proxying through their target's browser.

Frequently asked questions

What is CVE-2021-34561?: In PEPPERL+FUCHS WirelessHART-Gateway <= 3.0.8 serious issue exists, if the application is not externally accessible or uses IP-based access restrictions. Attackers can use DNS Rebinding to bypass any IP or firewall based access restrictions that may be in place, by proxying through their target's browser.
How severe is CVE-2021-34561?: CVE-2021-34561 has a CVSS 3.x base score of 7.5, rated high severity. It is exploitable over network with high attack complexity, requires no privileges and user interaction. Impact on confidentiality is high, integrity high, and availability high.
Is CVE-2021-34561 being actively exploited?: It is not currently listed in CISA's KEV catalog. Its EPSS exploit-prediction score is 1% (54th percentile), an estimate of the probability of exploitation in the next 30 days.
What products are affected by CVE-2021-34561?: CVE-2021-34561 primarily affects Pepperl-fuchs Wha-gw-f2d2-0-as-z2-eth Firmware. In total, 2 product configurations (CPEs) are listed as vulnerable; see the affected-products list for the exact versions.
How do I fix CVE-2021-34561?: Review the linked vendor and NVD advisories for patched versions and mitigations, then upgrade or apply the recommended workaround. Given its high severity, prioritise patching exposed systems.
When was CVE-2021-34561 published?: CVE-2021-34561 was published on 2021-08-31 and last updated on 2026-06-17.

References

https://cert.vde.com/en-us/advisories/vde-2021-027

Affected products (2)

cpe:2.3:o:pepperl-fuchs:wha-gw-f2d2-0-as-z2-eth_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:pepperl-fuchs:wha-gw-f2d2-0-as-z2-eth.eip_firmware:*:*:*:*:*:*:*:*

More vulnerabilities in Pepperl-fuchs Wha-gw-f2d2-0-as-z2-eth Firmware

CVE-2021-34565 — Critical (CVSS 9.8): In PEPPERL+FUCHS WirelessHART-Gateway 3.0.7 to 3.0.9 the SSH and telnet services are active with hard-coded credentials.
CVE-2021-33555 — High (CVSS 7.5): In PEPPERL+FUCHS WirelessHART-Gateway <= 3.0.7 the filename parameter is vulnerable to unauthenticated path traversal…
CVE-2021-34564 — Medium (CVSS 5.5): Any cookie-stealing vulnerabilities within the application or browser would enable an attacker to steal the user's…
CVE-2021-34560 — Medium (CVSS 5.5): In PEPPERL+FUCHS WirelessHART-Gateway <= 3.0.9 a form contains a password field with autocomplete enabled. The stored…
CVE-2021-34562 — Medium (CVSS 5.4): In PEPPERL+FUCHS WirelessHART-Gateway 3.0.8 it is possible to inject arbitrary JavaScript into the application's…
CVE-2021-34559 — Medium (CVSS 5.4): In PEPPERL+FUCHS WirelessHART-Gateway <= 3.0.8 a vulnerability may allow remote attackers to rewrite links and URLs in…

All CVEs affecting Pepperl-fuchs Wha-gw-f2d2-0-as-z2-eth Firmware →

Other CWE-350 vulnerabilities

CVE-2026-1490 — Critical (CVSS 9.8): The Spam protection, Anti-Spam, FireWall by CleanTalk plugin for WordPress is vulnerable to unauthorized Arbitrary…
CVE-2023-52235 — High (CVSS 8.8): SpaceX Starlink Wi-Fi router GEN 2 before 2023.53.0 and Starlink Dish before 07dd2798-ff15-4722-a9ee-de28928aed34 allow…
CVE-2025-8036 — High (CVSS 8.1): Thunderbird cached CORS preflight responses across IP address changes. This allowed circumventing CORS with DNS…
CVE-2026-33002 — High (CVSS 7.5): Jenkins 2.442 through 2.554 (both inclusive), LTS 2.426.3 through LTS 2.541.2 (both inclusive) performs origin…
CVE-2021-22884 — High (CVSS 7.5): Node.js before 10.24.0, 12.21.0, 14.16.0, and 15.10.0 is vulnerable to DNS rebinding attacks as the whitelist includes…
CVE-2026-36604 — Medium (CVSS 6.5): Mercusys AC12G (EU) V1 router with firmware AC12G(EU)_V1_200909 does not validate the HTTP Host header, enabling DNS…

Browse all CWE-350 vulnerabilities →