{"affected":[{"affectedData":[{"product":"UC20-WL2000-AC (No. 1334950000)","vendor":"Weidmüller","versions":[{"lessThanOrEqual":"1.9.0","status":"affected","version":"1.3.0","versionType":"custom"},{"lessThanOrEqual":"1.10.2","status":"affected","version":"1.10.0","versionType":"custom"},{"lessThanOrEqual":"1.12.1","status":"affected","version":"1.11.0","versionType":"custom"}]},{"product":"UC20-WL2000-IOT (No. 1334990000)","vendor":"Weidmüller","versions":[{"lessThanOrEqual":"1.9.0","status":"affected","version":"1.3.0","versionType":"custom"},{"lessThanOrEqual":"1.10.2","status":"affected","version":"1.10.0","versionType":"custom"},{"lessThanOrEqual":"1.12.1","status":"affected","version":"1.11.0","versionType":"custom"}]},{"product":"IOT-GW30 (No. 2682620000)","vendor":"Weidmüller","versions":[{"lessThanOrEqual":"1.9.0","status":"affected","version":"1.3.0","versionType":"custom"},{"lessThanOrEqual":"1.10.2","status":"affected","version":"1.10.0","versionType":"custom"},{"lessThanOrEqual":"1.12.1","status":"affected","version":"1.11.0","versionType":"custom"}]},{"product":"IOT-GW30-4G-EU (No. 2682630000)","vendor":"Weidmüller","versions":[{"lessThanOrEqual":"1.9.0","status":"affected","version":"1.3.0","versionType":"custom"},{"lessThanOrEqual":"1.10.2","status":"affected","version":"1.10.0","versionType":"custom"},{"lessThanOrEqual":"1.12.1","status":"affected","version":"1.11.0","versionType":"custom"}]}],"source":"info@cert.vde.com"}],"configurations":[{"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:o:weidmueller:uc20-wl2000-ac_firmware:*:*:*:*:*:*:*:*","matchCriteriaId":"5A1E7682-E240-4D15-AC34-626C77BE41B1","versionEndExcluding":"1.9.1","versionStartIncluding":"1.3.0","vulnerable":true},{"criteria":"cpe:2.3:o:weidmueller:uc20-wl2000-ac_firmware:*:*:*:*:*:*:*:*","matchCriteriaId":"0FF8472B-BBE3-4793-AF5F-E3AB4FB3D0E1","versionEndExcluding":"1.10.3","versionStartIncluding":"1.10.0","vulnerable":true},{"criteria":"cpe:2.3:o:weidmueller:uc20-wl2000-ac_firmware:1.11.0:*:*:*:*:*:*:*","matchCriteriaId":"1AF70A61-6C4A-4B07-B263-5E19CBCAD607","vulnerable":true},{"criteria":"cpe:2.3:o:weidmueller:uc20-wl2000-ac_firmware:1.12.1:*:*:*:*:*:*:*","matchCriteriaId":"A69023EC-EFA5-444C-9636-9855565AFF80","vulnerable":true}],"negate":false,"operator":"OR"},{"cpeMatch":[{"criteria":"cpe:2.3:h:weidmueller:uc20-wl2000-ac:-:*:*:*:*:*:*:*","matchCriteriaId":"BAD85D18-1A66-487D-80B3-C5E1285685DD","vulnerable":false}],"negate":false,"operator":"OR"}],"operator":"AND"},{"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:o:weidmueller:uc20-wl2000-iot_firmware:*:*:*:*:*:*:*:*","matchCriteriaId":"3AE0D482-A42D-4545-A5C5-15B0ADD36A8C","versionEndExcluding":"1.9.1","versionStartIncluding":"1.3.0","vulnerable":true},{"criteria":"cpe:2.3:o:weidmueller:uc20-wl2000-iot_firmware:*:*:*:*:*:*:*:*","matchCriteriaId":"00BD211A-944F-4074-9605-A78FFEB9F375","versionEndExcluding":"1.10.3","versionStartIncluding":"1.10.0","vulnerable":true},{"criteria":"cpe:2.3:o:weidmueller:uc20-wl2000-iot_firmware:1.11.0:*:*:*:*:*:*:*","matchCriteriaId":"3567D99A-8FC6-4663-8BFB-7AC1B5718D74","vulnerable":true},{"criteria":"cpe:2.3:o:weidmueller:uc20-wl2000-iot_firmware:1.12.1:*:*:*:*:*:*:*","matchCriteriaId":"52E0A330-8B6D-4610-9F90-AA455E0C30A7","vulnerable":true}],"negate":false,"operator":"OR"},{"cpeMatch":[{"criteria":"cpe:2.3:h:weidmueller:uc20-wl2000-iot:-:*:*:*:*:*:*:*","matchCriteriaId":"B98578B6-9F39-4616-A240-0A09832A0A92","vulnerable":false}],"negate":false,"operator":"OR"}],"operator":"AND"},{"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:o:weidmueller:iot-gw30_firmware:*:*:*:*:*:*:*:*","matchCriteriaId":"7D37EA6C-392B-404D-8A2D-2038D45B9736","versionEndExcluding":"1.9.1","versionStartIncluding":"1.3.0","vulnerable":true},{"criteria":"cpe:2.3:o:weidmueller:iot-gw30_firmware:*:*:*:*:*:*:*:*","matchCriteriaId":"82C07A83-6181-40D6-BAC5-0BFD2EB0775F","versionEndExcluding":"1.10.3","versionStartIncluding":"1.10.0","vulnerable":true},{"criteria":"cpe:2.3:o:weidmueller:iot-gw30_firmware:1.11.0:*:*:*:*:*:*:*","matchCriteriaId":"7D00D166-D270-4CA8-AF12-D00E936C09D2","vulnerable":true},{"criteria":"cpe:2.3:o:weidmueller:iot-gw30_firmware:1.12.1:*:*:*:*:*:*:*","matchCriteriaId":"799AAC8C-E0D9-4C56-A46E-5833E2FF4F36","vulnerable":true}],"negate":false,"operator":"OR"},{"cpeMatch":[{"criteria":"cpe:2.3:h:weidmueller:iot-gw30:-:*:*:*:*:*:*:*","matchCriteriaId":"B247B94B-4845-4FCC-81E1-4880A7B2B0FE","vulnerable":false}],"negate":false,"operator":"OR"}],"operator":"AND"},{"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:o:weidmueller:iot-gw30-4g-eu_firmware:*:*:*:*:*:*:*:*","matchCriteriaId":"FF37BFDC-99AC-4FE6-AE00-AAE5BCBC9A35","versionEndExcluding":"1.9.1","versionStartIncluding":"1.3.0","vulnerable":true},{"criteria":"cpe:2.3:o:weidmueller:iot-gw30-4g-eu_firmware:*:*:*:*:*:*:*:*","matchCriteriaId":"01983454-B4AE-4C7A-BC09-705FF0F1DB2B","versionEndExcluding":"1.10.3","versionStartIncluding":"1.10.0","vulnerable":true},{"criteria":"cpe:2.3:o:weidmueller:iot-gw30-4g-eu_firmware:1.11.0:*:*:*:*:*:*:*","matchCriteriaId":"6850EBC4-41BB-4845-9A87-AE3E7D9061B8","vulnerable":true},{"criteria":"cpe:2.3:o:weidmueller:iot-gw30-4g-eu_firmware:1.12.1:*:*:*:*:*:*:*","matchCriteriaId":"B93938B2-19B4-46D6-AB0B-1BC4FE559D91","vulnerable":true}],"negate":false,"operator":"OR"},{"cpeMatch":[{"criteria":"cpe:2.3:h:weidmueller:iot-gw30-4g-eu:-:*:*:*:*:*:*:*","matchCriteriaId":"4BD44BDA-E67A-4088-AF77-55C0BEC5782B","vulnerable":false}],"negate":false,"operator":"OR"}],"operator":"AND"}],"cveTags":[],"descriptions":[{"lang":"en","value":"In Weidmüller u-controls and IoT-Gateways in versions up to 1.12.1 a network port intended only for device-internal usage is accidentally accessible via external network interfaces. By exploiting this vulnerability the device may be manipulated or the operation may be stopped."},{"lang":"es","value":"En Weidmüller u-controls and IoT-Gateway en versiones hasta 1.12.1, se puede acceder accidentalmente a un puerto de red destinado únicamente para uso interno del dispositivo por medio de interfaces de red externas. Al explotar esta vulnerabilidad, el dispositivo puede ser manipulado o la operación puede ser detenida"}],"id":"CVE-2021-20999","lastModified":"2026-06-17T03:34:37.780","metrics":{"cvssMetricV2":[{"acInsufInfo":false,"baseSeverity":"HIGH","cvssData":{"accessComplexity":"LOW","accessVector":"NETWORK","authentication":"NONE","availabilityImpact":"PARTIAL","baseScore":7.5,"confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","version":"2.0"},"exploitabilityScore":10.0,"impactScore":6.4,"obtainAllPrivilege":false,"obtainOtherPrivilege":false,"obtainUserPrivilege":false,"source":"nvd@nist.gov","type":"Primary","userInteractionRequired":false}],"cvssMetricV31":[{"cvssData":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"HIGH","baseScore":9.4,"baseSeverity":"CRITICAL","confidentialityImpact":"LOW","integrityImpact":"HIGH","privilegesRequired":"NONE","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:H/A:H","version":"3.1"},"exploitabilityScore":3.9,"impactScore":5.5,"source":"info@cert.vde.com","type":"Secondary"},{"cvssData":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"HIGH","baseScore":9.8,"baseSeverity":"CRITICAL","confidentialityImpact":"HIGH","integrityImpact":"HIGH","privilegesRequired":"NONE","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","version":"3.1"},"exploitabilityScore":3.9,"impactScore":5.9,"source":"nvd@nist.gov","type":"Primary"}]},"published":"2021-05-13T14:15:18.150","references":[{"source":"info@cert.vde.com","tags":["Third Party Advisory"],"url":"https://cert.vde.com/en-us/advisories/vde-2021-016"},{"source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"],"url":"https://cert.vde.com/en-us/advisories/vde-2021-016"}],"sourceIdentifier":"info@cert.vde.com","vulnStatus":"Modified","weaknesses":[{"description":[{"lang":"en","value":"CWE-668"}],"source":"info@cert.vde.com","type":"Secondary"},{"description":[{"lang":"en","value":"NVD-CWE-Other"}],"source":"nvd@nist.gov","type":"Primary"}]}