CVE-2021-20999— WEIDMUELLER: Accidentally open network port in u-controls and IoT-Gateways
Quick assessment
Affected
Weidmüller UC20-WL2000-AC (No. 1334950000)
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.
Weidmuller UC20-WL2000-AC是美国Weidmuller公司的一个工控设备。一个控制器。 Weidmuller UC20-WL2000-AC 1.12.1版本存在安全漏洞。攻击者可以利用该漏洞操纵设备或停止设备。
Get alerts for future matching vulnerabilities
Log in to subscribe
I. Basic Information for CVE-2021-20999
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
WEIDMUELLER: Accidentally open network port in u-controls and IoT-Gateways
Source: CVE Program / CVE List V5
Vulnerability Description
In Weidmüller u-controls and IoT-Gateways in versions up to 1.12.1 a network port intended only for device-internal usage is accidentally accessible via external network interfaces. By exploiting this vulnerability the device may be manipulated or the operation may be stopped.
Source: CVE Program / CVE List V5
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:H/A:H
Source: CVE Program / CVE List V5
Vulnerability Type
将资源暴露给错误范围
Source: CVE Program / CVE List V5
Vulnerability Title
Weidmuller UC20-WL2000-AC 安全漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Weidmuller UC20-WL2000-AC是美国Weidmuller公司的一个工控设备。一个控制器。 Weidmuller UC20-WL2000-AC 1.12.1版本存在安全漏洞。攻击者可以利用该漏洞操纵设备或停止设备。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| Weidmüller | UC20-WL2000-AC (No. 1334950000) | 1.3.0 ~ 1.9.0 | - |
|
| Weidmüller | UC20-WL2000-IOT (No. 1334990000) | 1.3.0 ~ 1.9.0 | - |
|
| Weidmüller | IOT-GW30 (No. 2682620000) | 1.3.0 ~ 1.9.0 | - |
|
| Weidmüller | IOT-GW30-4G-EU (No. 2682630000) | 1.3.0 ~ 1.9.0 | - |
|
II. Public POCs for CVE-2021-20999
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POC
Premium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2021-20999
请登录查看更多情报信息。
Other References for CVE-2021-20999 (1)
IV. Related Vulnerabilities
Same vendor: Weidmüller
-
CVE-2021-33539
WEIDMUELLER: WLAN devices affected by authentication bypass -
CVE-2021-33538
WEIDMUELLER: WLAN devices affected by improper access contro -
CVE-2021-33537
WEIDMUELLER: WLAN devices affected by Remote Code Execution -
CVE-2021-33536
WEIDMUELLER: WLAN devices affected by Denial-of-Service vuln -
CVE-2021-33535
WEIDMUELLER: WLAN devices affected by exploitable format str
Same weakness: CWE-668
-
CVE-2026-79068
Chrome<152.0.7977.65越界资源暴露漏洞 -
CVE-2026-79031
Chrome < 152.0.7977.65 资源暴露导致绕过站点隔离 -
CVE-2026-59308
Semantic Cache Cross-Tenant Isolation Bypass via SHA-256 Tru -
CVE-2026-72782
Craft CMS 5.0.0-RC1 before 5.10.6 Environment Variable Leak -
CVE-2026-72764
n8n before 1.123.67 Module Cache Poisoning via Code Node
V. Comments for CVE-2021-20999
No comments yet