Vulnerabilites related to wago - 750-831_firmware
cve-2021-21001
Vulnerability from cvelistv5
Published
2021-05-24 11:05
Modified
2024-09-16 16:19
Severity ?
EPSS score ?
Summary
On WAGO PFC200 devices in different firmware versions with special crafted packets an authorised attacker with network access to the device can access the file system with higher privileges.
References
▼ | URL | Tags |
---|---|---|
https://cert.vde.com/en-us/advisories/vde-2021-014 | x_refsource_CONFIRM |
Impacted products
Vendor | Product | Version | |||||||
---|---|---|---|---|---|---|---|---|---|
▼ | WAGO | Series PFC200 Controller |
Version: 750-823 < Version: 750-829 < Version: 750-831/000-00x < Version: 750-832/000-00x < Version: 750-852 < Version: 750-862 < Version: 750-880/0xx-xxx < Version: 750-881 < Version: 750-882 < Version: 750-885/0xx-xxx < Version: 750-889 < Version: 750-890/0xx-xxx < Version: 750-891 < Version: 750-893 < |
||||||
|
{ "containers": { "adp": [ { "providerMetadata": { "dateUpdated": "2024-08-03T17:53:23.101Z", "orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE" }, "references": [ { "tags": [ "x_refsource_CONFIRM", "x_transferred" ], "url": "https://cert.vde.com/en-us/advisories/vde-2021-014" } ], "title": "CVE Program Container" } ], "cna": { "affected": [ { "product": "Series PFC200 Controller", "vendor": "WAGO", "versions": [ { "lessThanOrEqual": "FW07", "status": "affected", "version": "750-823", "versionType": "custom" }, { "lessThanOrEqual": "FW14", "status": "affected", "version": "750-829", "versionType": "custom" }, { "lessThanOrEqual": "FW14", "status": "affected", "version": "750-831/000-00x", "versionType": "custom" }, { "lessThanOrEqual": "FW06", "status": "affected", "version": "750-832/000-00x", "versionType": "custom" }, { "lessThanOrEqual": "FW14", "status": "affected", "version": "750-852", "versionType": "custom" }, { "lessThanOrEqual": "FW07", "status": "affected", "version": "750-862", "versionType": "custom" }, { "lessThanOrEqual": "FW15", "status": "affected", "version": "750-880/0xx-xxx", "versionType": "custom" }, { "lessThanOrEqual": "FW14", "status": "affected", "version": "750-881", "versionType": "custom" }, { "lessThanOrEqual": "FW14", "status": "affected", "version": "750-882", "versionType": "custom" }, { "lessThanOrEqual": "FW14", "status": "affected", "version": "750-885/0xx-xxx", "versionType": "custom" }, { "lessThanOrEqual": "FW14", "status": "affected", "version": "750-889", "versionType": "custom" }, { "lessThanOrEqual": "FW07", "status": "affected", "version": "750-890/0xx-xxx", "versionType": "custom" }, { "lessThanOrEqual": "FW07", "status": "affected", "version": "750-891", "versionType": "custom" }, { "lessThanOrEqual": "FW07", "status": "affected", "version": "750-893", "versionType": "custom" } ] }, { "product": "Series Ethernet Controller", "vendor": "WAGO", "versions": [ { "lessThan": "03.06.19 (18)", "status": "affected", "version": "750-8202/xxx-xxx", "versionType": "custom" }, { "lessThan": "03.06.19 (18)", "status": "affected", "version": "750-8203/xxx-xxx", "versionType": "custom" }, { "lessThan": "03.06.19 (18)", "status": "affected", "version": "750-8204/xxx-xxx", "versionType": "custom" }, { "lessThan": "03.06.19 (18)", "status": "affected", "version": "750-8206/xxx-xxx", "versionType": "custom" }, { "lessThan": "03.06.19 (18)", "status": "affected", "version": "750-8207/xxx-xxx", "versionType": "custom" }, { "lessThan": "03.06.19 (18)", "status": "affected", "version": "750-8208/xxx-xxx", "versionType": "custom" }, { "lessThan": "03.06.19 (18)", "status": "affected", "version": "750-8210/xxx-xxx", "versionType": "custom" }, { "lessThan": "03.06.19 (18)", "status": "affected", "version": "750-8211/xxx-xxx", "versionType": "custom" }, { "lessThan": "03.06.19 (18)", "status": "affected", "version": "750-8212/xxx-xxx", "versionType": "custom" }, { "lessThan": "03.06.19 (18)", "status": "affected", "version": "750-8213/xxx-xxx", "versionType": "custom" }, { "lessThan": "03.06.19 (18)", "status": "affected", "version": "750-8214/xxx-xxx", "versionType": "custom" }, { "lessThan": "03.06.19 (18)", "status": "affected", "version": "750-8216/xxx-xxx", "versionType": "custom" }, { "lessThan": "03.06.19 (18)", "status": "affected", "version": "750-8217/xxx-xxx", "versionType": "custom" } ] } ], "credits": [ { "lang": "en", "value": "These vulnerabilities were reported by JSC Positive Technologies (Vyacheslav Moskvin, Anton Dorfman, Sergey Fedonin, Ivan Kurnakov, Denis Goryushev). Coordination done by CERT@VDE." } ], "datePublic": "2021-05-20T00:00:00", "descriptions": [ { "lang": "en", "value": "On WAGO PFC200 devices in different firmware versions with special crafted packets an authorised attacker with network access to the device can access the file system with higher privileges." } ], "metrics": [ { "cvssV3_1": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 9.1, "baseSeverity": "CRITICAL", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "HIGH", "scope": "CHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H", "version": "3.1" } } ], "problemTypes": [ { "descriptions": [ { "cweId": "CWE-22", "description": "CWE-22 Improper Limitation of a Pathname to a Restricted Directory (\u0027Path Traversal\u0027)", "lang": "en", "type": "CWE" } ] } ], "providerMetadata": { "dateUpdated": "2021-05-24T11:05:06", "orgId": "270ccfa6-a436-4e77-922e-914ec3a9685c", "shortName": "CERTVDE" }, "references": [ { "tags": [ "x_refsource_CONFIRM" ], "url": "https://cert.vde.com/en-us/advisories/vde-2021-014" } ], "solutions": [ { "lang": "en", "value": "WAGO recommends all effected users with CODESYS 2.3 Runtime PLCs to update to the firmware versions listed at https://cert.vde.com/en-us/advisories/vde-2021-014 in the solution paragraph." } ], "source": { "advisory": "VDE-2021-014", "defect": [ "VDE-2021-014" ], "discovery": "EXTERNAL" }, "title": "WAGO: PFC200 Access to files outside the home directory", "workarounds": [ { "lang": "en", "value": "Use general security best practices to protect systems from local and network attacks.\nDo not allow direct access to the device from untrusted networks.\nUpdate to the latest firmware according to the table in chapter solutions." } ], "x_generator": { "engine": "Vulnogram 0.0.9" }, "x_legacyV4Record": { "CVE_data_meta": { "ASSIGNER": "info@cert.vde.com", "DATE_PUBLIC": "2021-05-20T10:00:00.000Z", "ID": "CVE-2021-21001", "STATE": "PUBLIC", "TITLE": "WAGO: PFC200 Access to files outside the home directory" }, "affects": { "vendor": { "vendor_data": [ { "product": { "product_data": [ { "product_name": "Series PFC200 Controller", "version": { "version_data": [ { "version_affected": "\u003c=", "version_name": "750-823", "version_value": "FW07" }, { "version_affected": "\u003c=", "version_name": "750-829", "version_value": "FW14" }, { "version_affected": "\u003c=", "version_name": "750-831/000-00x", "version_value": "FW14" }, { "version_affected": "\u003c=", "version_name": "750-832/000-00x", "version_value": "FW06" }, { "version_affected": "\u003c=", "version_name": "750-852", "version_value": "FW14" }, { "version_affected": "\u003c=", "version_name": "750-862", "version_value": "FW07" }, { "version_affected": "\u003c=", "version_name": "750-880/0xx-xxx", "version_value": "FW15" }, { "version_affected": "\u003c=", "version_name": "750-881", "version_value": "FW14" }, { "version_affected": "\u003c=", "version_name": "750-882", "version_value": "FW14" }, { "version_affected": "\u003c=", "version_name": "750-885/0xx-xxx", "version_value": "FW14" }, { "version_affected": "\u003c=", "version_name": "750-889", "version_value": "FW14" }, { "version_affected": "\u003c=", "version_name": "750-890/0xx-xxx", "version_value": "FW07" }, { "version_affected": "\u003c=", "version_name": "750-891", "version_value": "FW07" }, { "version_affected": "\u003c=", "version_name": "750-893", "version_value": "FW07" } ] } }, { "product_name": "Series Ethernet Controller", "version": { "version_data": [ { "version_affected": "\u003c", "version_name": "750-8202/xxx-xxx", "version_value": "03.06.19 (18)" }, { "version_affected": "\u003c", "version_name": "750-8203/xxx-xxx", "version_value": "03.06.19 (18)" }, { "version_affected": "\u003c", "version_name": "750-8204/xxx-xxx", "version_value": "03.06.19 (18)" }, { "version_affected": "\u003c", "version_name": "750-8206/xxx-xxx", "version_value": "03.06.19 (18)" }, { "version_affected": "\u003c", "version_name": "750-8207/xxx-xxx", "version_value": "03.06.19 (18)" }, { "version_affected": "\u003c", "version_name": "750-8208/xxx-xxx", "version_value": "03.06.19 (18)" }, { "version_affected": "\u003c", "version_name": "750-8210/xxx-xxx", "version_value": "03.06.19 (18)" }, { "version_affected": "\u003c", "version_name": "750-8211/xxx-xxx", "version_value": "03.06.19 (18)" }, { "version_affected": "\u003c", "version_name": "750-8212/xxx-xxx", "version_value": "03.06.19 (18)" }, { "version_affected": "\u003c", "version_name": "750-8213/xxx-xxx", "version_value": "03.06.19 (18)" }, { "version_affected": "\u003c", "version_name": "750-8214/xxx-xxx", "version_value": "03.06.19 (18)" }, { "version_affected": "\u003c", "version_name": "750-8216/xxx-xxx", "version_value": "03.06.19 (18)" }, { "version_affected": "\u003c", "version_name": "750-8217/xxx-xxx", "version_value": "03.06.19 (18)" } ] } } ] }, "vendor_name": "WAGO" } ] } }, "credit": [ { "lang": "eng", "value": "These vulnerabilities were reported by JSC Positive Technologies (Vyacheslav Moskvin, Anton Dorfman, Sergey Fedonin, Ivan Kurnakov, Denis Goryushev). Coordination done by CERT@VDE." } ], "data_format": "MITRE", "data_type": "CVE", "data_version": "4.0", "description": { "description_data": [ { "lang": "eng", "value": "On WAGO PFC200 devices in different firmware versions with special crafted packets an authorised attacker with network access to the device can access the file system with higher privileges." } ] }, "generator": { "engine": "Vulnogram 0.0.9" }, "impact": { "cvss": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 9.1, "baseSeverity": "CRITICAL", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "HIGH", "scope": "CHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H", "version": "3.1" } }, "problemtype": { "problemtype_data": [ { "description": [ { "lang": "eng", "value": "CWE-22 Improper Limitation of a Pathname to a Restricted Directory (\u0027Path Traversal\u0027)" } ] } ] }, "references": { "reference_data": [ { "name": "https://cert.vde.com/en-us/advisories/vde-2021-014", "refsource": "CONFIRM", "url": "https://cert.vde.com/en-us/advisories/vde-2021-014" } ] }, "solution": [ { "lang": "en", "value": "WAGO recommends all effected users with CODESYS 2.3 Runtime PLCs to update to the firmware versions listed at https://cert.vde.com/en-us/advisories/vde-2021-014 in the solution paragraph." } ], "source": { "advisory": "VDE-2021-014", "defect": [ "VDE-2021-014" ], "discovery": "EXTERNAL" }, "work_around": [ { "lang": "en", "value": "Use general security best practices to protect systems from local and network attacks.\nDo not allow direct access to the device from untrusted networks.\nUpdate to the latest firmware according to the table in chapter solutions." } ] } } }, "cveMetadata": { "assignerOrgId": "270ccfa6-a436-4e77-922e-914ec3a9685c", "assignerShortName": "CERTVDE", "cveId": "CVE-2021-21001", "datePublished": "2021-05-24T11:05:06.147811Z", "dateReserved": "2020-12-17T00:00:00", "dateUpdated": "2024-09-16T16:19:02.930Z", "state": "PUBLISHED" }, "dataType": "CVE_RECORD", "dataVersion": "5.1" }
cve-2019-10712
Vulnerability from cvelistv5
Published
2019-05-07 21:20
Modified
2024-08-04 22:32
Severity ?
EPSS score ?
Summary
The Web-GUI on WAGO Series 750-88x (750-330, 750-352, 750-829, 750-831, 750-852, 750-880, 750-881, 750-882, 750-884, 750-885, 750-889) and Series 750-87x (750-830, 750-849, 750-871, 750-872, 750-873) devices has undocumented service access.
References
{ "containers": { "adp": [ { "providerMetadata": { "dateUpdated": "2024-08-04T22:32:01.465Z", "orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE" }, "references": [ { "tags": [ "x_refsource_MISC", "x_transferred" ], "url": "https://cert.vde.com/de-de/advisories/vde-2019-008" }, { "name": "108482", "tags": [ "vdb-entry", "x_refsource_BID", "x_transferred" ], "url": "http://www.securityfocus.com/bid/108482" }, { "name": "[cassandra-commits] 20200407 [jira] [Created] (CASSANDRA-15701) Does Cassandra 3.11.3/3.11.5 is affected by CVE-2019-10712 or not ?", "tags": [ "mailing-list", "x_refsource_MLIST", "x_transferred" ], "url": "https://lists.apache.org/thread.html/r25e25973e9577c62fd0221b4b52990851adf11cbe33036bd67d4b13d%40%3Ccommits.cassandra.apache.org%3E" }, { "name": "[cassandra-commits] 20200413 [jira] [Commented] (CASSANDRA-15701) Does Cassandra 3.11.3/3.11.5 is affected by CVE-2019-10712 or not ?", "tags": [ "mailing-list", "x_refsource_MLIST", "x_transferred" ], "url": "https://lists.apache.org/thread.html/ra37700b842790883b9082e6b281fb7596f571b13078a4856cd38f2c2%40%3Ccommits.cassandra.apache.org%3E" }, { "name": "[cassandra-commits] 20200420 [jira] [Updated] (CASSANDRA-15701) Does Cassandra 3.11.3/3.11.5 is affected by CVE-2019-10712 or not ?", "tags": [ "mailing-list", "x_refsource_MLIST", "x_transferred" ], "url": "https://lists.apache.org/thread.html/r0066c1e862613de402fee04e81cbe00bcd64b64a2711beb9a13c3b25%40%3Ccommits.cassandra.apache.org%3E" }, { "name": "[cassandra-commits] 20200420 [jira] [Commented] (CASSANDRA-15701) Does Cassandra 3.11.3/3.11.5 is affected by CVE-2019-10712 or not ?", "tags": [ "mailing-list", "x_refsource_MLIST", "x_transferred" ], "url": "https://lists.apache.org/thread.html/r37eb6579fa0bf94a72b6c978e2fee96f68a2b1b3ac1b1ce60aee86cf%40%3Ccommits.cassandra.apache.org%3E" }, { "name": "[cassandra-commits] 20200420 [jira] [Commented] (CASSANDRA-15701) Does Cassandra 3.11.3/3.11.5 is affected by CVE-2019-10712 or not ?", "tags": [ "mailing-list", "x_refsource_MLIST", "x_transferred" ], "url": "https://lists.apache.org/thread.html/rb47911c179c9f3e8ea3f134b5645e63cd20c6fc63bd0b43ab5864bd1%40%3Ccommits.cassandra.apache.org%3E" }, { "name": "[cassandra-commits] 20200901 [jira] [Commented] (CASSANDRA-15701) Does Cassandra 3.11.3/3.11.5 is affected by CVE-2019-10712 or not ?", "tags": [ "mailing-list", "x_refsource_MLIST", "x_transferred" ], "url": "https://lists.apache.org/thread.html/r386966780034aadee69ffd82d44555117c9339545b9ce990fe490a3e%40%3Ccommits.cassandra.apache.org%3E" }, { "name": "[cassandra-commits] 20200901 [jira] [Commented] (CASSANDRA-15701) Does Cassandra 3.11.3/3.11.5 is affected by CVE-2019-10712 or not ?", "tags": [ "mailing-list", "x_refsource_MLIST", "x_transferred" ], "url": "https://lists.apache.org/thread.html/r80e8882c86c9c17a57396a5ef7c4f08878d629a0291243411be0de3a%40%3Ccommits.cassandra.apache.org%3E" } ], "title": "CVE Program Container" } ], "cna": { "affected": [ { "product": "n/a", "vendor": "n/a", "versions": [ { "status": "affected", "version": "n/a" } ] } ], "datePublic": "2019-04-12T00:00:00", "descriptions": [ { "lang": "en", "value": "The Web-GUI on WAGO Series 750-88x (750-330, 750-352, 750-829, 750-831, 750-852, 750-880, 750-881, 750-882, 750-884, 750-885, 750-889) and Series 750-87x (750-830, 750-849, 750-871, 750-872, 750-873) devices has undocumented service access." } ], "problemTypes": [ { "descriptions": [ { "description": "n/a", "lang": "en", "type": "text" } ] } ], "providerMetadata": { "dateUpdated": "2020-10-01T10:06:07", "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "shortName": "mitre" }, "references": [ { "tags": [ "x_refsource_MISC" ], "url": "https://cert.vde.com/de-de/advisories/vde-2019-008" }, { "name": "108482", "tags": [ "vdb-entry", "x_refsource_BID" ], "url": "http://www.securityfocus.com/bid/108482" }, { "name": "[cassandra-commits] 20200407 [jira] [Created] (CASSANDRA-15701) Does Cassandra 3.11.3/3.11.5 is affected by CVE-2019-10712 or not ?", "tags": [ "mailing-list", "x_refsource_MLIST" ], "url": "https://lists.apache.org/thread.html/r25e25973e9577c62fd0221b4b52990851adf11cbe33036bd67d4b13d%40%3Ccommits.cassandra.apache.org%3E" }, { "name": "[cassandra-commits] 20200413 [jira] [Commented] (CASSANDRA-15701) Does Cassandra 3.11.3/3.11.5 is affected by CVE-2019-10712 or not ?", "tags": [ "mailing-list", "x_refsource_MLIST" ], "url": "https://lists.apache.org/thread.html/ra37700b842790883b9082e6b281fb7596f571b13078a4856cd38f2c2%40%3Ccommits.cassandra.apache.org%3E" }, { "name": "[cassandra-commits] 20200420 [jira] [Updated] (CASSANDRA-15701) Does Cassandra 3.11.3/3.11.5 is affected by CVE-2019-10712 or not ?", "tags": [ "mailing-list", "x_refsource_MLIST" ], "url": "https://lists.apache.org/thread.html/r0066c1e862613de402fee04e81cbe00bcd64b64a2711beb9a13c3b25%40%3Ccommits.cassandra.apache.org%3E" }, { "name": "[cassandra-commits] 20200420 [jira] [Commented] (CASSANDRA-15701) Does Cassandra 3.11.3/3.11.5 is affected by CVE-2019-10712 or not ?", "tags": [ "mailing-list", "x_refsource_MLIST" ], "url": "https://lists.apache.org/thread.html/r37eb6579fa0bf94a72b6c978e2fee96f68a2b1b3ac1b1ce60aee86cf%40%3Ccommits.cassandra.apache.org%3E" }, { "name": "[cassandra-commits] 20200420 [jira] [Commented] (CASSANDRA-15701) Does Cassandra 3.11.3/3.11.5 is affected by CVE-2019-10712 or not ?", "tags": [ "mailing-list", "x_refsource_MLIST" ], "url": "https://lists.apache.org/thread.html/rb47911c179c9f3e8ea3f134b5645e63cd20c6fc63bd0b43ab5864bd1%40%3Ccommits.cassandra.apache.org%3E" }, { "name": "[cassandra-commits] 20200901 [jira] [Commented] (CASSANDRA-15701) Does Cassandra 3.11.3/3.11.5 is affected by CVE-2019-10712 or not ?", "tags": [ "mailing-list", "x_refsource_MLIST" ], "url": "https://lists.apache.org/thread.html/r386966780034aadee69ffd82d44555117c9339545b9ce990fe490a3e%40%3Ccommits.cassandra.apache.org%3E" }, { "name": "[cassandra-commits] 20200901 [jira] [Commented] (CASSANDRA-15701) Does Cassandra 3.11.3/3.11.5 is affected by CVE-2019-10712 or not ?", "tags": [ "mailing-list", "x_refsource_MLIST" ], "url": "https://lists.apache.org/thread.html/r80e8882c86c9c17a57396a5ef7c4f08878d629a0291243411be0de3a%40%3Ccommits.cassandra.apache.org%3E" } ], "x_legacyV4Record": { "CVE_data_meta": { "ASSIGNER": "cve@mitre.org", "ID": "CVE-2019-10712", "STATE": "PUBLIC" }, "affects": { "vendor": { "vendor_data": [ { "product": { "product_data": [ { "product_name": "n/a", "version": { "version_data": [ { "version_value": "n/a" } ] } } ] }, "vendor_name": "n/a" } ] } }, "data_format": "MITRE", "data_type": "CVE", "data_version": "4.0", "description": { "description_data": [ { "lang": "eng", "value": "The Web-GUI on WAGO Series 750-88x (750-330, 750-352, 750-829, 750-831, 750-852, 750-880, 750-881, 750-882, 750-884, 750-885, 750-889) and Series 750-87x (750-830, 750-849, 750-871, 750-872, 750-873) devices has undocumented service access." } ] }, "problemtype": { "problemtype_data": [ { "description": [ { "lang": "eng", "value": "n/a" } ] } ] }, "references": { "reference_data": [ { "name": "https://cert.vde.com/de-de/advisories/vde-2019-008", "refsource": "MISC", "url": "https://cert.vde.com/de-de/advisories/vde-2019-008" }, { "name": "108482", "refsource": "BID", "url": "http://www.securityfocus.com/bid/108482" }, { "name": "[cassandra-commits] 20200407 [jira] [Created] (CASSANDRA-15701) Does Cassandra 3.11.3/3.11.5 is affected by CVE-2019-10712 or not ?", "refsource": "MLIST", "url": "https://lists.apache.org/thread.html/r25e25973e9577c62fd0221b4b52990851adf11cbe33036bd67d4b13d@%3Ccommits.cassandra.apache.org%3E" }, { "name": "[cassandra-commits] 20200413 [jira] [Commented] (CASSANDRA-15701) Does Cassandra 3.11.3/3.11.5 is affected by CVE-2019-10712 or not ?", "refsource": "MLIST", "url": "https://lists.apache.org/thread.html/ra37700b842790883b9082e6b281fb7596f571b13078a4856cd38f2c2@%3Ccommits.cassandra.apache.org%3E" }, { "name": "[cassandra-commits] 20200420 [jira] [Updated] (CASSANDRA-15701) Does Cassandra 3.11.3/3.11.5 is affected by CVE-2019-10712 or not ?", "refsource": "MLIST", "url": "https://lists.apache.org/thread.html/r0066c1e862613de402fee04e81cbe00bcd64b64a2711beb9a13c3b25@%3Ccommits.cassandra.apache.org%3E" }, { "name": "[cassandra-commits] 20200420 [jira] [Commented] (CASSANDRA-15701) Does Cassandra 3.11.3/3.11.5 is affected by CVE-2019-10712 or not ?", "refsource": "MLIST", "url": "https://lists.apache.org/thread.html/r37eb6579fa0bf94a72b6c978e2fee96f68a2b1b3ac1b1ce60aee86cf@%3Ccommits.cassandra.apache.org%3E" }, { "name": "[cassandra-commits] 20200420 [jira] [Commented] (CASSANDRA-15701) Does Cassandra 3.11.3/3.11.5 is affected by CVE-2019-10712 or not ?", "refsource": "MLIST", "url": "https://lists.apache.org/thread.html/rb47911c179c9f3e8ea3f134b5645e63cd20c6fc63bd0b43ab5864bd1@%3Ccommits.cassandra.apache.org%3E" }, { "name": "[cassandra-commits] 20200901 [jira] [Commented] (CASSANDRA-15701) Does Cassandra 3.11.3/3.11.5 is affected by CVE-2019-10712 or not ?", "refsource": "MLIST", "url": "https://lists.apache.org/thread.html/r386966780034aadee69ffd82d44555117c9339545b9ce990fe490a3e@%3Ccommits.cassandra.apache.org%3E" }, { "name": "[cassandra-commits] 20200901 [jira] [Commented] (CASSANDRA-15701) Does Cassandra 3.11.3/3.11.5 is affected by CVE-2019-10712 or not ?", "refsource": "MLIST", "url": "https://lists.apache.org/thread.html/r80e8882c86c9c17a57396a5ef7c4f08878d629a0291243411be0de3a@%3Ccommits.cassandra.apache.org%3E" } ] } } } }, "cveMetadata": { "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "assignerShortName": "mitre", "cveId": "CVE-2019-10712", "datePublished": "2019-05-07T21:20:03", "dateReserved": "2019-04-02T00:00:00", "dateUpdated": "2024-08-04T22:32:01.465Z", "state": "PUBLISHED" }, "dataType": "CVE_RECORD", "dataVersion": "5.1" }
cve-2021-34581
Vulnerability from cvelistv5
Published
2021-08-31 10:33
Modified
2024-09-17 00:42
Severity ?
EPSS score ?
Summary
Missing Release of Resource after Effective Lifetime vulnerability in OpenSSL implementation of WAGO 750-831/xxx-xxx, 750-880/xxx-xxx, 750-881, 750-889 in versions FW4 up to FW15 allows an unauthenticated attacker to cause DoS on the device.
References
▼ | URL | Tags |
---|---|---|
https://cert.vde.com/en-us/advisories/vde-2021-038 | x_refsource_CONFIRM |
Impacted products
Vendor | Product | Version | ||
---|---|---|---|---|
WAGO | 750-831/xxx-xxx, 750-880/xxx-xxx, 750-881, 750-889 |
Version: FW4 < All* |
{ "containers": { "adp": [ { "providerMetadata": { "dateUpdated": "2024-08-04T00:19:46.962Z", "orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE" }, "references": [ { "tags": [ "x_refsource_CONFIRM", "x_transferred" ], "url": "https://cert.vde.com/en-us/advisories/vde-2021-038" } ], "title": "CVE Program Container" } ], "cna": { "affected": [ { "product": "750-831/xxx-xxx, 750-880/xxx-xxx, 750-881, 750-889", "vendor": "WAGO", "versions": [ { "lessThan": "All*", "status": "affected", "version": "FW4", "versionType": "custom" } ] } ], "credits": [ { "lang": "en", "value": "These vulnerabilities were reported to WAGO by: Uwe Disch. Coordination done by CERT@VDE" } ], "datePublic": "2021-08-31T00:00:00", "descriptions": [ { "lang": "en", "value": "Missing Release of Resource after Effective Lifetime vulnerability in OpenSSL implementation of WAGO 750-831/xxx-xxx, 750-880/xxx-xxx, 750-881, 750-889 in versions FW4 up to FW15 allows an unauthenticated attacker to cause DoS on the device." } ], "metrics": [ { "cvssV3_1": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 7.5, "baseSeverity": "HIGH", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "version": "3.1" } } ], "problemTypes": [ { "descriptions": [ { "cweId": "CWE-772", "description": "CWE-772 Missing Release of Resource after Effective Lifetime", "lang": "en", "type": "CWE" } ] } ], "providerMetadata": { "dateUpdated": "2021-08-31T10:33:02", "orgId": "270ccfa6-a436-4e77-922e-914ec3a9685c", "shortName": "CERTVDE" }, "references": [ { "tags": [ "x_refsource_CONFIRM" ], "url": "https://cert.vde.com/en-us/advisories/vde-2021-038" } ], "solutions": [ { "lang": "en", "value": "Update the device to the latest FW version ( \u003eFW15 )." } ], "source": { "advisory": "VDE-2021-038", "discovery": "EXTERNAL" }, "title": "WAGO: Denial of Service vulnerability inside the OpenSSL implementation", "workarounds": [ { "lang": "en", "value": "Restrict network access to the device.\nDo not directly connect the device to the internet\nDisable unused TCP/UDP-ports\nDisable Web Based Management ports 80/443 after configuration phase." } ], "x_generator": { "engine": "Vulnogram 0.0.9" }, "x_legacyV4Record": { "CVE_data_meta": { "ASSIGNER": "info@cert.vde.com", "DATE_PUBLIC": "2021-08-31T07:00:00.000Z", "ID": "CVE-2021-34581", "STATE": "PUBLIC", "TITLE": "WAGO: Denial of Service vulnerability inside the OpenSSL implementation" }, "affects": { "vendor": { "vendor_data": [ { "product": { "product_data": [ { "product_name": "750-831/xxx-xxx, 750-880/xxx-xxx, 750-881, 750-889", "version": { "version_data": [ { "version_affected": "\u003e=", "version_name": "All", "version_value": "FW4" }, { "version_affected": "\u003c=", "version_name": "All", "version_value": "FW15 +1" } ] } } ] }, "vendor_name": "WAGO" } ] } }, "credit": [ { "lang": "eng", "value": "These vulnerabilities were reported to WAGO by: Uwe Disch. Coordination done by CERT@VDE" } ], "data_format": "MITRE", "data_type": "CVE", "data_version": "4.0", "description": { "description_data": [ { "lang": "eng", "value": "Missing Release of Resource after Effective Lifetime vulnerability in OpenSSL implementation of WAGO 750-831/xxx-xxx, 750-880/xxx-xxx, 750-881, 750-889 in versions FW4 up to FW15 allows an unauthenticated attacker to cause DoS on the device." } ] }, "generator": { "engine": "Vulnogram 0.0.9" }, "impact": { "cvss": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 7.5, "baseSeverity": "HIGH", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "version": "3.1" } }, "problemtype": { "problemtype_data": [ { "description": [ { "lang": "eng", "value": "CWE-772 Missing Release of Resource after Effective Lifetime" } ] } ] }, "references": { "reference_data": [ { "name": "https://cert.vde.com/en-us/advisories/vde-2021-038", "refsource": "CONFIRM", "url": "https://cert.vde.com/en-us/advisories/vde-2021-038" } ] }, "solution": [ { "lang": "en", "value": "Update the device to the latest FW version ( \u003eFW15 )." } ], "source": { "advisory": "VDE-2021-038", "discovery": "EXTERNAL" }, "work_around": [ { "lang": "en", "value": "Restrict network access to the device.\nDo not directly connect the device to the internet\nDisable unused TCP/UDP-ports\nDisable Web Based Management ports 80/443 after configuration phase." } ] } } }, "cveMetadata": { "assignerOrgId": "270ccfa6-a436-4e77-922e-914ec3a9685c", "assignerShortName": "CERTVDE", "cveId": "CVE-2021-34581", "datePublished": "2021-08-31T10:33:02.999010Z", "dateReserved": "2021-06-10T00:00:00", "dateUpdated": "2024-09-17T00:42:35.318Z", "state": "PUBLISHED" }, "dataType": "CVE_RECORD", "dataVersion": "5.1" }
cve-2023-1620
Vulnerability from cvelistv5
Published
2023-06-26 06:19
Modified
2024-11-12 14:11
Severity ?
EPSS score ?
Summary
Multiple WAGO devices in multiple versions may allow an authenticated remote attacker with high privileges to DoS the device by sending a specifically crafted packet to the CODESYS V2 runtime.
References
▼ | URL | Tags |
---|---|---|
https://cert.vde.com/en/advisories/VDE-2023-006/ | vendor-advisory |
Impacted products
Vendor | Product | Version | ||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
▼ | Wago | 750-8202/xxx-xxx |
Version: FW1 < |
|||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
|
{ "containers": { "adp": [ { "providerMetadata": { "dateUpdated": "2024-08-02T05:57:24.833Z", "orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE" }, "references": [ { "tags": [ "vendor-advisory", "x_transferred" ], "url": "https://cert.vde.com/en/advisories/VDE-2023-006/" } ], "title": "CVE Program Container" }, { "metrics": [ { "other": { "content": { "id": "CVE-2023-1620", "options": [ { "Exploitation": "none" }, { "Automatable": "no" }, { "Technical Impact": "partial" } ], "role": "CISA Coordinator", "timestamp": "2024-11-08T20:30:42.286955Z", "version": "2.0.3" }, "type": "ssvc" } } ], "providerMetadata": { "dateUpdated": "2024-11-12T14:11:36.673Z", "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP" }, "title": "CISA ADP Vulnrichment" } ], "cna": { "affected": [ { "defaultStatus": "unaffected", "product": "750-8202/xxx-xxx", "vendor": "Wago", "versions": [ { "lessThanOrEqual": "FW22 SP1", "status": "affected", "version": "FW1", "versionType": "custom" } ] }, { "defaultStatus": "unaffected", "product": "750-8203/xxx-xxx", "vendor": "Wago", "versions": [ { "lessThanOrEqual": "FW22 SP1", "status": "affected", "version": "FW1", "versionType": "custom" } ] }, { "defaultStatus": "unaffected", "product": "750-8204/xxx-xxx", "vendor": "Wago", "versions": [ { "lessThanOrEqual": "FW22 SP1", "status": "affected", "version": "FW1", "versionType": "custom" } ] }, { "defaultStatus": "unaffected", "product": "750-8206/xxx-xxx", "vendor": "Wago", "versions": [ { "lessThanOrEqual": "FW22 SP1", "status": "affected", "version": "FW1", "versionType": "custom" } ] }, { "defaultStatus": "unaffected", "product": "750-8207/xxx-xxx", "vendor": "Wago", "versions": [ { "lessThanOrEqual": "FW22 SP1", "status": "affected", "version": "FW1", "versionType": "custom" } ] }, { "defaultStatus": "unaffected", "product": "750-8208/xxx-xxx", "vendor": "Wago", "versions": [ { "lessThanOrEqual": "FW22 SP1", "status": "affected", "version": "FW1", "versionType": "custom" } ] }, { "defaultStatus": "unaffected", "product": "750-8210/xxx-xxx", "vendor": "Wago", "versions": [ { "lessThanOrEqual": "FW22 SP1", "status": "affected", "version": "FW1", "versionType": "custom" } ] }, { "defaultStatus": "unaffected", "product": "750-8211/xxx-xxx", "vendor": "Wago", "versions": [ { "lessThanOrEqual": "FW22 SP1", "status": "affected", "version": "FW1", "versionType": "custom" } ] }, { "defaultStatus": "unaffected", "product": "750-8212/xxx-xxx", "vendor": "Wago", "versions": [ { "lessThanOrEqual": "FW22 SP1", "status": "affected", "version": "FW1", "versionType": "custom" } ] }, { "defaultStatus": "unaffected", "product": "750-8213/xxx-xxx", "vendor": "Wago", "versions": [ { "lessThanOrEqual": "FW22 SP1", "status": "affected", "version": "FW1", "versionType": "custom" } ] }, { "defaultStatus": "unaffected", "product": "750-8214/xxx-xxx", "vendor": "Wago", "versions": [ { "lessThanOrEqual": "FW22 SP1", "status": "affected", "version": "FW1", "versionType": "custom" } ] }, { "defaultStatus": "unaffected", "product": "750-8216/xxx-xxx", "vendor": "Wago", "versions": [ { "lessThanOrEqual": "FW22 SP1", "status": "affected", "version": "FW1", "versionType": "custom" } ] }, { "defaultStatus": "unaffected", "product": "750-8217/xxx-xxx", "vendor": "Wago", "versions": [ { "lessThanOrEqual": "FW22 SP1", "status": "affected", "version": "FW1", "versionType": "custom" } ] }, { "defaultStatus": "unaffected", "product": "750-823", "vendor": "Wago", "versions": [ { "lessThanOrEqual": "FW10", "status": "affected", "version": "FW1", "versionType": "custom" } ] }, { "defaultStatus": "unaffected", "product": "750-332", "vendor": "Wago", "versions": [ { "lessThanOrEqual": "FW6", "status": "affected", "version": "FW1", "versionType": "custom" } ] }, { "defaultStatus": "unaffected", "product": "750-832/xxx-xxx", "vendor": "Wago", "versions": [ { "lessThanOrEqual": "FW6", "status": "affected", "version": "FW1", "versionType": "custom" } ] }, { "defaultStatus": "unaffected", "product": "750-862", "vendor": "Wago", "versions": [ { "lessThanOrEqual": "FW10", "status": "affected", "version": "FW1", "versionType": "custom" } ] }, { "defaultStatus": "unaffected", "product": "750-890/xxx-xxx", "vendor": "Wago", "versions": [ { "lessThanOrEqual": "FW10", "status": "affected", "version": "FW1", "versionType": "custom" } ] }, { "defaultStatus": "unaffected", "product": "750-891", "vendor": "Wago", "versions": [ { "lessThanOrEqual": "FW10", "status": "affected", "version": "FW1", "versionType": "custom" } ] }, { "defaultStatus": "unaffected", "product": "750-893", "vendor": "Wago", "versions": [ { "lessThanOrEqual": "FW10", "status": "affected", "version": "FW1", "versionType": "custom" } ] }, { "defaultStatus": "unaffected", "product": "750-331", "vendor": "Wago", "versions": [ { "lessThanOrEqual": "FW14", "status": "affected", "version": "FW1", "versionType": "custom" } ] }, { "defaultStatus": "unaffected", "product": "750-829", "vendor": "Wago", "versions": [ { "lessThanOrEqual": "FW14", "status": "affected", "version": "FW1", "versionType": "custom" } ] }, { "defaultStatus": "unaffected", "product": "750-831/xxx-xxx", "vendor": "Wago", "versions": [ { "lessThanOrEqual": "FW14", "status": "affected", "version": "FW1", "versionType": "custom" } ] }, { "defaultStatus": "unaffected", "product": "750-852", "vendor": "Wago", "versions": [ { "lessThanOrEqual": "FW16", "status": "affected", "version": "FW1", "versionType": "custom" } ] }, { "defaultStatus": "unaffected", "product": "750-880/xxx-xxx", "vendor": "Wago", "versions": [ { "lessThanOrEqual": "FW16", "status": "affected", "version": "FW1", "versionType": "custom" } ] }, { "defaultStatus": "unaffected", "product": "750-881", "vendor": "Wago", "versions": [ { "lessThanOrEqual": "FW16", "status": "affected", "version": "FW1", "versionType": "custom" } ] }, { "defaultStatus": "unaffected", "product": "750-882", "vendor": "Wago", "versions": [ { "lessThanOrEqual": "FW16", "status": "affected", "version": "FW1", "versionType": "custom" } ] }, { "defaultStatus": "unaffected", "product": "750-885/xxx-xxx", "vendor": "Wago", "versions": [ { "lessThanOrEqual": "FW16", "status": "affected", "version": "FW1", "versionType": "custom" } ] }, { "defaultStatus": "unaffected", "product": "750-889", "vendor": "Wago", "versions": [ { "lessThanOrEqual": "FW16", "status": "affected", "version": "FW1", "versionType": "custom" } ] } ], "credits": [ { "lang": "en", "type": "reporter", "user": "00000000-0000-4000-9000-000000000000", "value": "Daniel dos Santos from Forescout" }, { "lang": "en", "type": "reporter", "user": "00000000-0000-4000-9000-000000000000", "value": "Abdelrahman Hassanien from Forescout" } ], "descriptions": [ { "lang": "en", "supportingMedia": [ { "base64": false, "type": "text/html", "value": "Multiple WAGO devices in multiple versions may allow an authenticated remote attacker with high privileges to DoS the device by sending a specifically crafted packet to the CODESYS V2 runtime." } ], "value": "Multiple WAGO devices in multiple versions may allow an authenticated remote attacker with high privileges to DoS the device by sending a specifically crafted packet to the CODESYS V2 runtime." } ], "metrics": [ { "cvssV3_1": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 4.9, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "HIGH", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H", "version": "3.1" }, "format": "CVSS", "scenarios": [ { "lang": "en", "value": "GENERAL" } ] } ], "problemTypes": [ { "descriptions": [ { "cweId": "CWE-1288", "description": "CWE-1288 Improper Validation of Consistency within Input", "lang": "en", "type": "CWE" } ] } ], "providerMetadata": { "dateUpdated": "2024-10-02T05:28:51.078Z", "orgId": "270ccfa6-a436-4e77-922e-914ec3a9685c", "shortName": "CERTVDE" }, "references": [ { "tags": [ "vendor-advisory" ], "url": "https://cert.vde.com/en/advisories/VDE-2023-006/" } ], "source": { "advisory": "VDE-2023-006", "defect": [ "CERT@VDE#64417" ], "discovery": "UNKNOWN" }, "title": "WAGO: DoS in multiple products in multiple versions using Codesys", "x_generator": { "engine": "Vulnogram 0.1.0-dev" } } }, "cveMetadata": { "assignerOrgId": "270ccfa6-a436-4e77-922e-914ec3a9685c", "assignerShortName": "CERTVDE", "cveId": "CVE-2023-1620", "datePublished": "2023-06-26T06:19:30.928Z", "dateReserved": "2023-03-24T10:12:26.426Z", "dateUpdated": "2024-11-12T14:11:36.673Z", "state": "PUBLISHED" }, "dataType": "CVE_RECORD", "dataVersion": "5.1" }
cve-2020-12516
Vulnerability from cvelistv5
Published
2020-12-10 03:04
Modified
2024-09-16 22:14
Severity ?
EPSS score ?
Summary
Older firmware versions (FW1 up to FW10) of the WAGO PLC family 750-88x and 750-352 are vulnerable for a special denial of service attack.
References
▼ | URL | Tags |
---|---|---|
https://us-cert.cisa.gov/ics/advisories/icsa-20-308-01 | x_refsource_MISC | |
https://cert.vde.com/en-us/advisories/vde-2020-042 | x_refsource_CONFIRM |
Impacted products
Vendor | Product | Version | |||||||||||||||||||||||||||||||||||||||||||||||
---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
▼ | WAGO | 750-331/xxx-xxx |
Version: FW1<=FW10 |
||||||||||||||||||||||||||||||||||||||||||||||
|
{ "containers": { "adp": [ { "providerMetadata": { "dateUpdated": "2024-08-04T11:56:52.085Z", "orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE" }, "references": [ { "tags": [ "x_refsource_MISC", "x_transferred" ], "url": "https://us-cert.cisa.gov/ics/advisories/icsa-20-308-01" }, { "tags": [ "x_refsource_CONFIRM", "x_transferred" ], "url": "https://cert.vde.com/en-us/advisories/vde-2020-042" } ], "title": "CVE Program Container" } ], "cna": { "affected": [ { "product": "750-331/xxx-xxx", "vendor": "WAGO", "versions": [ { "status": "affected", "version": "FW1\u003c=FW10" } ] }, { "product": "750-352", "vendor": "WAGO", "versions": [ { "status": "affected", "version": "FW1\u003c=FW10" } ] }, { "product": "750-829", "vendor": "WAGO", "versions": [ { "status": "affected", "version": "FW1\u003c=FW10" } ] }, { "product": "750-831/xxx-xxx", "vendor": "WAGO", "versions": [ { "status": "affected", "version": "FW1\u003c=FW10" } ] }, { "product": "750-852", "vendor": "WAGO", "versions": [ { "status": "affected", "version": "FW1\u003c=FW10" } ] }, { "product": "750-880/xxx-xxx", "vendor": "WAGO", "versions": [ { "status": "affected", "version": "FW1\u003c=FW10" } ] }, { "product": "750-881", "vendor": "WAGO", "versions": [ { "status": "affected", "version": "FW1\u003c=FW10" } ] }, { "product": "750-882", "vendor": "WAGO", "versions": [ { "status": "affected", "version": "FW1\u003c=FW10" } ] }, { "product": "750-885", "vendor": "WAGO", "versions": [ { "status": "affected", "version": "FW1\u003c=FW10" } ] }, { "product": "750-889", "vendor": "WAGO", "versions": [ { "status": "affected", "version": "FW1\u003c=FW10" } ] } ], "credits": [ { "lang": "en", "value": "These vulnerabilities were reported to WAGO by: William Knowles, Applied Risk. Coordination done by CERT@VDE." } ], "datePublic": "2020-12-09T00:00:00", "descriptions": [ { "lang": "en", "value": "Older firmware versions (FW1 up to FW10) of the WAGO PLC family 750-88x and 750-352 are vulnerable for a special denial of service attack." } ], "metrics": [ { "cvssV3_1": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 7.5, "baseSeverity": "HIGH", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "version": "3.1" } } ], "problemTypes": [ { "descriptions": [ { "cweId": "CWE-400", "description": "CWE-400 Uncontrolled Resource Consumption", "lang": "en", "type": "CWE" } ] } ], "providerMetadata": { "dateUpdated": "2020-12-22T21:14:49", "orgId": "270ccfa6-a436-4e77-922e-914ec3a9685c", "shortName": "CERTVDE" }, "references": [ { "tags": [ "x_refsource_MISC" ], "url": "https://us-cert.cisa.gov/ics/advisories/icsa-20-308-01" }, { "tags": [ "x_refsource_CONFIRM" ], "url": "https://cert.vde.com/en-us/advisories/vde-2020-042" } ], "solutions": [ { "lang": "en", "value": "Update the device to the latest FW version." } ], "source": { "advisory": "VDE-2020-042", "defect": [ "VDE-2020-042" ], "discovery": "UNKNOWN" }, "title": "WAGO: PLC families 750-88x and 750-352 prone to DoS attack", "workarounds": [ { "lang": "en", "value": "Restrict network access to the device.\nDo not directly connect the device to the internet\nDisable unused TCP/UDP-ports" } ], "x_generator": { "engine": "Vulnogram 0.0.9" }, "x_legacyV4Record": { "CVE_data_meta": { "AKA": "", "ASSIGNER": "info@cert.vde.com", "DATE_PUBLIC": "2020-12-09T09:00:00.000Z", "ID": "CVE-2020-12516", "STATE": "PUBLIC", "TITLE": "WAGO: PLC families 750-88x and 750-352 prone to DoS attack" }, "affects": { "vendor": { "vendor_data": [ { "product": { "product_data": [ { "product_name": "750-331/xxx-xxx", "version": { "version_data": [ { "version_value": "FW1\u003c=FW10" } ] } }, { "product_name": "750-352", "version": { "version_data": [ { "version_value": "FW1\u003c=FW10" } ] } }, { "product_name": "750-829", "version": { "version_data": [ { "version_value": "FW1\u003c=FW10" } ] } }, { "product_name": "750-831/xxx-xxx", "version": { "version_data": [ { "version_value": "FW1\u003c=FW10" } ] } }, { "product_name": "750-852", "version": { "version_data": [ { "version_value": "FW1\u003c=FW10" } ] } }, { "product_name": "750-880/xxx-xxx", "version": { "version_data": [ { "version_value": "FW1\u003c=FW10" } ] } }, { "product_name": "750-881", "version": { "version_data": [ { "version_value": "FW1\u003c=FW10" } ] } }, { "product_name": "750-882", "version": { "version_data": [ { "version_value": "FW1\u003c=FW10" } ] } }, { "product_name": "750-885", "version": { "version_data": [ { "version_value": "FW1\u003c=FW10" } ] } }, { "product_name": "750-889", "version": { "version_data": [ { "version_value": "FW1\u003c=FW10" } ] } } ] }, "vendor_name": "WAGO" } ] } }, "configuration": [], "credit": [ { "lang": "eng", "value": "These vulnerabilities were reported to WAGO by: William Knowles, Applied Risk. Coordination done by CERT@VDE." } ], "data_format": "MITRE", "data_type": "CVE", "data_version": "4.0", "description": { "description_data": [ { "lang": "eng", "value": "Older firmware versions (FW1 up to FW10) of the WAGO PLC family 750-88x and 750-352 are vulnerable for a special denial of service attack." } ] }, "exploit": [], "generator": { "engine": "Vulnogram 0.0.9" }, "impact": { "cvss": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 7.5, "baseSeverity": "HIGH", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "version": "3.1" } }, "problemtype": { "problemtype_data": [ { "description": [ { "lang": "eng", "value": "CWE-400 Uncontrolled Resource Consumption" } ] } ] }, "references": { "reference_data": [ { "name": "https://us-cert.cisa.gov/ics/advisories/icsa-20-308-01", "refsource": "MISC", "url": "https://us-cert.cisa.gov/ics/advisories/icsa-20-308-01" }, { "name": "https://cert.vde.com/en-us/advisories/vde-2020-042", "refsource": "CONFIRM", "url": "https://cert.vde.com/en-us/advisories/vde-2020-042" } ] }, "solution": [ { "lang": "en", "value": "Update the device to the latest FW version." } ], "source": { "advisory": "VDE-2020-042", "defect": [ "VDE-2020-042" ], "discovery": "UNKNOWN" }, "work_around": [ { "lang": "en", "value": "Restrict network access to the device.\nDo not directly connect the device to the internet\nDisable unused TCP/UDP-ports" } ] } } }, "cveMetadata": { "assignerOrgId": "270ccfa6-a436-4e77-922e-914ec3a9685c", "assignerShortName": "CERTVDE", "cveId": "CVE-2020-12516", "datePublished": "2020-12-10T03:04:17.186342Z", "dateReserved": "2020-04-30T00:00:00", "dateUpdated": "2024-09-16T22:14:10.360Z", "state": "PUBLISHED" }, "dataType": "CVE_RECORD", "dataVersion": "5.1" }
cve-2018-8836
Vulnerability from cvelistv5
Published
2018-04-03 13:00
Modified
2024-09-17 04:13
Severity ?
EPSS score ?
Summary
Wago 750 Series PLCs with firmware version 10 and prior include a remote attack may take advantage of an improper implementation of the 3 way handshake during a TCP connection affecting the communications with commission and service tools. Specially crafted packets may also be sent to Port 2455/TCP/IP, used in Codesys management software, which may result in a denial-of-service condition of communications with commissioning and service tools.
References
Impacted products
Vendor | Product | Version | ||
---|---|---|---|---|
WAGO | WAGO 750 Series |
Version: 750-880 firmware version 10 and prior Version: 750-881 firmware version 10 and prior Version: 750-852 firmware version 10 and prior Version: 750-882 firmware version 10 and prior Version: 750-885 firmware version 10 and prior Version: 750-831 firmware version 10 and prior Version: 750-889 firmware version 10 and prior Version: 750-829 firmware version 10 and prior |
{ "containers": { "adp": [ { "providerMetadata": { "dateUpdated": "2024-08-05T07:02:26.244Z", "orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE" }, "references": [ { "name": "103726", "tags": [ "vdb-entry", "x_refsource_BID", "x_transferred" ], "url": "http://www.securityfocus.com/bid/103726" }, { "tags": [ "x_refsource_MISC", "x_transferred" ], "url": "https://ics-cert.us-cert.gov/advisories/ICSA-18-088-01" }, { "tags": [ "x_refsource_CONFIRM", "x_transferred" ], "url": "https://www.wago.com/medias/Vulnerability-in-the-WAGO-Ethernet-TCP-IP-driver.pdf?context=bWFzdGVyfHJvb3R8MjgxNDk0fGFwcGxpY2F0aW9uL3BkZnxoOTcvaDhkLzkxNTAyMjMyMjA3NjYucGRmfGRlNWQ4ODc0NTE5M2UyNTUwNTIyNDRlOWFkNWI2YjNkMzg0YTVhYzlmYTBjNzM4MDdmNmYzOTM5M2ZlMGEzNzE" } ], "title": "CVE Program Container" } ], "cna": { "affected": [ { "product": "WAGO 750 Series", "vendor": "WAGO", "versions": [ { "status": "affected", "version": "750-880 firmware version 10 and prior" }, { "status": "affected", "version": "750-881 firmware version 10 and prior" }, { "status": "affected", "version": "750-852 firmware version 10 and prior" }, { "status": "affected", "version": "750-882 firmware version 10 and prior" }, { "status": "affected", "version": "750-885 firmware version 10 and prior" }, { "status": "affected", "version": "750-831 firmware version 10 and prior" }, { "status": "affected", "version": "750-889 firmware version 10 and prior" }, { "status": "affected", "version": "750-829 firmware version 10 and prior" } ] } ], "datePublic": "2018-03-15T00:00:00", "descriptions": [ { "lang": "en", "value": "Wago 750 Series PLCs with firmware version 10 and prior include a remote attack may take advantage of an improper implementation of the 3 way handshake during a TCP connection affecting the communications with commission and service tools. Specially crafted packets may also be sent to Port 2455/TCP/IP, used in Codesys management software, which may result in a denial-of-service condition of communications with commissioning and service tools." } ], "problemTypes": [ { "descriptions": [ { "cweId": "CWE-404", "description": "IMPROPER RESOURCE SHUTDOWN OR RELEASE CWE-404", "lang": "en", "type": "CWE" } ] } ], "providerMetadata": { "dateUpdated": "2018-04-12T09:57:02", "orgId": "7d14cffa-0d7d-4270-9dc0-52cabd5a23a6", "shortName": "icscert" }, "references": [ { "name": "103726", "tags": [ "vdb-entry", "x_refsource_BID" ], "url": "http://www.securityfocus.com/bid/103726" }, { "tags": [ "x_refsource_MISC" ], "url": "https://ics-cert.us-cert.gov/advisories/ICSA-18-088-01" }, { "tags": [ "x_refsource_CONFIRM" ], "url": "https://www.wago.com/medias/Vulnerability-in-the-WAGO-Ethernet-TCP-IP-driver.pdf?context=bWFzdGVyfHJvb3R8MjgxNDk0fGFwcGxpY2F0aW9uL3BkZnxoOTcvaDhkLzkxNTAyMjMyMjA3NjYucGRmfGRlNWQ4ODc0NTE5M2UyNTUwNTIyNDRlOWFkNWI2YjNkMzg0YTVhYzlmYTBjNzM4MDdmNmYzOTM5M2ZlMGEzNzE" } ], "x_legacyV4Record": { "CVE_data_meta": { "ASSIGNER": "ics-cert@hq.dhs.gov", "DATE_PUBLIC": "2018-03-15T00:00:00", "ID": "CVE-2018-8836", "STATE": "PUBLIC" }, "affects": { "vendor": { "vendor_data": [ { "product": { "product_data": [ { "product_name": "WAGO 750 Series", "version": { "version_data": [ { "version_value": "750-880 firmware version 10 and prior" }, { "version_value": "750-881 firmware version 10 and prior" }, { "version_value": "750-852 firmware version 10 and prior" }, { "version_value": "750-882 firmware version 10 and prior" }, { "version_value": "750-885 firmware version 10 and prior" }, { "version_value": "750-831 firmware version 10 and prior" }, { "version_value": "750-889 firmware version 10 and prior" }, { "version_value": "750-829 firmware version 10 and prior" } ] } } ] }, "vendor_name": "WAGO" } ] } }, "data_format": "MITRE", "data_type": "CVE", "data_version": "4.0", "description": { "description_data": [ { "lang": "eng", "value": "Wago 750 Series PLCs with firmware version 10 and prior include a remote attack may take advantage of an improper implementation of the 3 way handshake during a TCP connection affecting the communications with commission and service tools. Specially crafted packets may also be sent to Port 2455/TCP/IP, used in Codesys management software, which may result in a denial-of-service condition of communications with commissioning and service tools." } ] }, "problemtype": { "problemtype_data": [ { "description": [ { "lang": "eng", "value": "IMPROPER RESOURCE SHUTDOWN OR RELEASE CWE-404" } ] } ] }, "references": { "reference_data": [ { "name": "103726", "refsource": "BID", "url": "http://www.securityfocus.com/bid/103726" }, { "name": "https://ics-cert.us-cert.gov/advisories/ICSA-18-088-01", "refsource": "MISC", "url": "https://ics-cert.us-cert.gov/advisories/ICSA-18-088-01" }, { "name": "https://www.wago.com/medias/Vulnerability-in-the-WAGO-Ethernet-TCP-IP-driver.pdf?context=bWFzdGVyfHJvb3R8MjgxNDk0fGFwcGxpY2F0aW9uL3BkZnxoOTcvaDhkLzkxNTAyMjMyMjA3NjYucGRmfGRlNWQ4ODc0NTE5M2UyNTUwNTIyNDRlOWFkNWI2YjNkMzg0YTVhYzlmYTBjNzM4MDdmNmYzOTM5M2ZlMGEzNzE", "refsource": "CONFIRM", "url": "https://www.wago.com/medias/Vulnerability-in-the-WAGO-Ethernet-TCP-IP-driver.pdf?context=bWFzdGVyfHJvb3R8MjgxNDk0fGFwcGxpY2F0aW9uL3BkZnxoOTcvaDhkLzkxNTAyMjMyMjA3NjYucGRmfGRlNWQ4ODc0NTE5M2UyNTUwNTIyNDRlOWFkNWI2YjNkMzg0YTVhYzlmYTBjNzM4MDdmNmYzOTM5M2ZlMGEzNzE" } ] } } } }, "cveMetadata": { "assignerOrgId": "7d14cffa-0d7d-4270-9dc0-52cabd5a23a6", "assignerShortName": "icscert", "cveId": "CVE-2018-8836", "datePublished": "2018-04-03T13:00:00Z", "dateReserved": "2018-03-20T00:00:00", "dateUpdated": "2024-09-17T04:13:48.585Z", "state": "PUBLISHED" }, "dataType": "CVE_RECORD", "dataVersion": "5.1" }
cve-2021-21000
Vulnerability from cvelistv5
Published
2021-05-24 11:05
Modified
2024-09-16 18:43
Severity ?
EPSS score ?
Summary
On WAGO PFC200 devices in different firmware versions with special crafted packets an attacker with network access to the device could cause a denial of service for the login service of the runtime.
References
▼ | URL | Tags |
---|---|---|
https://cert.vde.com/en-us/advisories/vde-2021-014 | x_refsource_CONFIRM |
Impacted products
Vendor | Product | Version | |||||||
---|---|---|---|---|---|---|---|---|---|
▼ | WAGO | Series PFC200 Controller |
Version: 750-823 < Version: 750-829 < Version: 750-831/000-00x < Version: 750-832/000-00x < Version: 750-852 < Version: 750-862 < Version: 750-880/0xx-xxx < Version: 750-881 < Version: 750-882 < Version: 750-885/0xx-xxx < Version: 750-889 < Version: 750-890/0xx-xxx < Version: 750-891 < Version: 750-893 < |
||||||
|
{ "containers": { "adp": [ { "providerMetadata": { "dateUpdated": "2024-08-03T17:53:23.073Z", "orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE" }, "references": [ { "tags": [ "x_refsource_CONFIRM", "x_transferred" ], "url": "https://cert.vde.com/en-us/advisories/vde-2021-014" } ], "title": "CVE Program Container" } ], "cna": { "affected": [ { "product": "Series PFC200 Controller", "vendor": "WAGO", "versions": [ { "lessThanOrEqual": "FW07", "status": "affected", "version": "750-823", "versionType": "custom" }, { "lessThanOrEqual": "FW14", "status": "affected", "version": "750-829", "versionType": "custom" }, { "lessThanOrEqual": "FW14", "status": "affected", "version": "750-831/000-00x", "versionType": "custom" }, { "lessThanOrEqual": "FW06", "status": "affected", "version": "750-832/000-00x", "versionType": "custom" }, { "lessThanOrEqual": "FW14", "status": "affected", "version": "750-852", "versionType": "custom" }, { "lessThanOrEqual": "FW07", "status": "affected", "version": "750-862", "versionType": "custom" }, { "lessThanOrEqual": "FW15", "status": "affected", "version": "750-880/0xx-xxx", "versionType": "custom" }, { "lessThanOrEqual": "FW14", "status": "affected", "version": "750-881", "versionType": "custom" }, { "lessThanOrEqual": "FW14", "status": "affected", "version": "750-882", "versionType": "custom" }, { "lessThanOrEqual": "FW14", "status": "affected", "version": "750-885/0xx-xxx", "versionType": "custom" }, { "lessThanOrEqual": "FW14", "status": "affected", "version": "750-889", "versionType": "custom" }, { "lessThanOrEqual": "FW07", "status": "affected", "version": "750-890/0xx-xxx", "versionType": "custom" }, { "lessThanOrEqual": "FW07", "status": "affected", "version": "750-891", "versionType": "custom" }, { "lessThanOrEqual": "FW07", "status": "affected", "version": "750-893", "versionType": "custom" } ] }, { "product": "Series Ethernet Controller", "vendor": "WAGO", "versions": [ { "lessThan": "03.06.19 (18)", "status": "affected", "version": "750-8202/xxx-xxx", "versionType": "custom" }, { "lessThan": "03.06.19 (18)", "status": "affected", "version": "750-8203/xxx-xxx", "versionType": "custom" }, { "lessThan": "03.06.19 (18)", "status": "affected", "version": "750-8204/xxx-xxx", "versionType": "custom" }, { "lessThan": "03.06.19 (18)", "status": "affected", "version": "750-8206/xxx-xxx", "versionType": "custom" }, { "lessThan": "03.06.19 (18)", "status": "affected", "version": "750-8207/xxx-xxx", "versionType": "custom" }, { "lessThan": "03.06.19 (18)", "status": "affected", "version": "750-8208/xxx-xxx", "versionType": "custom" }, { "lessThan": "03.06.19 (18)", "status": "affected", "version": "750-8210/xxx-xxx", "versionType": "custom" }, { "lessThan": "03.06.19 (18)", "status": "affected", "version": "750-8211/xxx-xxx", "versionType": "custom" }, { "lessThan": "03.06.19 (18)", "status": "affected", "version": "750-8212/xxx-xxx", "versionType": "custom" }, { "lessThan": "03.06.19 (18)", "status": "affected", "version": "750-8213/xxx-xxx", "versionType": "custom" }, { "lessThan": "03.06.19 (18)", "status": "affected", "version": "750-8214/xxx-xxx", "versionType": "custom" }, { "lessThan": "03.06.19 (18)", "status": "affected", "version": "750-8216/xxx-xxx", "versionType": "custom" }, { "lessThan": "03.06.19 (18)", "status": "affected", "version": "750-8217/xxx-xxx", "versionType": "custom" } ] } ], "credits": [ { "lang": "en", "value": "These vulnerabilities were reported by JSC Positive Technologies (Vyacheslav Moskvin, Anton Dorfman, Sergey Fedonin, Ivan Kurnakov, Denis Goryushev). Coordination done by CERT@VDE." } ], "datePublic": "2021-05-20T00:00:00", "descriptions": [ { "lang": "en", "value": "On WAGO PFC200 devices in different firmware versions with special crafted packets an attacker with network access to the device could cause a denial of service for the login service of the runtime." } ], "metrics": [ { "cvssV3_1": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "LOW", "baseScore": 5.3, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L", "version": "3.1" } } ], "problemTypes": [ { "descriptions": [ { "cweId": "CWE-770", "description": "CWE-770 Allocation of Resources Without Limits or Throttling", "lang": "en", "type": "CWE" } ] } ], "providerMetadata": { "dateUpdated": "2021-05-24T11:05:05", "orgId": "270ccfa6-a436-4e77-922e-914ec3a9685c", "shortName": "CERTVDE" }, "references": [ { "tags": [ "x_refsource_CONFIRM" ], "url": "https://cert.vde.com/en-us/advisories/vde-2021-014" } ], "solutions": [ { "lang": "en", "value": "WAGO recommends all effected users with CODESYS 2.3 Runtime PLCs to update to the firmware versions listed at https://cert.vde.com/en-us/advisories/vde-2021-014 in the solution paragraph." } ], "source": { "advisory": "VDE-2021-014", "defect": [ "VDE-2021-014" ], "discovery": "EXTERNAL" }, "title": "WAGO: PFC200 Denial of Service due to the number of connections to the runtime", "workarounds": [ { "lang": "en", "value": "Use general security best practices to protect systems from local and network attacks.\nDo not allow direct access to the device from untrusted networks.\nUpdate to the latest firmware according to the table in chapter solutions." } ], "x_generator": { "engine": "Vulnogram 0.0.9" }, "x_legacyV4Record": { "CVE_data_meta": { "ASSIGNER": "info@cert.vde.com", "DATE_PUBLIC": "2021-05-20T10:00:00.000Z", "ID": "CVE-2021-21000", "STATE": "PUBLIC", "TITLE": "WAGO: PFC200 Denial of Service due to the number of connections to the runtime" }, "affects": { "vendor": { "vendor_data": [ { "product": { "product_data": [ { "product_name": "Series PFC200 Controller", "version": { "version_data": [ { "version_affected": "\u003c=", "version_name": "750-823", "version_value": "FW07" }, { "version_affected": "\u003c=", "version_name": "750-829", "version_value": "FW14" }, { "version_affected": "\u003c=", "version_name": "750-831/000-00x", "version_value": "FW14" }, { "version_affected": "\u003c=", "version_name": "750-832/000-00x", "version_value": "FW06" }, { "version_affected": "\u003c=", "version_name": "750-852", "version_value": "FW14" }, { "version_affected": "\u003c=", "version_name": "750-862", "version_value": "FW07" }, { "version_affected": "\u003c=", "version_name": "750-880/0xx-xxx", "version_value": "FW15" }, { "version_affected": "\u003c=", "version_name": "750-881", "version_value": "FW14" }, { "version_affected": "\u003c=", "version_name": "750-882", "version_value": "FW14" }, { "version_affected": "\u003c=", "version_name": "750-885/0xx-xxx", "version_value": "FW14" }, { "version_affected": "\u003c=", "version_name": "750-889", "version_value": "FW14" }, { "version_affected": "\u003c=", "version_name": "750-890/0xx-xxx", "version_value": "FW07" }, { "version_affected": "\u003c=", "version_name": "750-891", "version_value": "FW07" }, { "version_affected": "\u003c=", "version_name": "750-893", "version_value": "FW07" } ] } }, { "product_name": "Series Ethernet Controller", "version": { "version_data": [ { "version_affected": "\u003c", "version_name": "750-8202/xxx-xxx", "version_value": "03.06.19 (18)" }, { "version_affected": "\u003c", "version_name": "750-8203/xxx-xxx", "version_value": "03.06.19 (18)" }, { "version_affected": "\u003c", "version_name": "750-8204/xxx-xxx", "version_value": "03.06.19 (18)" }, { "version_affected": "\u003c", "version_name": "750-8206/xxx-xxx", "version_value": "03.06.19 (18)" }, { "version_affected": "\u003c", "version_name": "750-8207/xxx-xxx", "version_value": "03.06.19 (18)" }, { "version_affected": "\u003c", "version_name": "750-8208/xxx-xxx", "version_value": "03.06.19 (18)" }, { "version_affected": "\u003c", "version_name": "750-8210/xxx-xxx", "version_value": "03.06.19 (18)" }, { "version_affected": "\u003c", "version_name": "750-8211/xxx-xxx", "version_value": "03.06.19 (18)" }, { "version_affected": "\u003c", "version_name": "750-8212/xxx-xxx", "version_value": "03.06.19 (18)" }, { "version_affected": "\u003c", "version_name": "750-8213/xxx-xxx", "version_value": "03.06.19 (18)" }, { "version_affected": "\u003c", "version_name": "750-8214/xxx-xxx", "version_value": "03.06.19 (18)" }, { "version_affected": "\u003c", "version_name": "750-8216/xxx-xxx", "version_value": "03.06.19 (18)" }, { "version_affected": "\u003c", "version_name": "750-8217/xxx-xxx", "version_value": "03.06.19 (18)" } ] } } ] }, "vendor_name": "WAGO" } ] } }, "credit": [ { "lang": "eng", "value": "These vulnerabilities were reported by JSC Positive Technologies (Vyacheslav Moskvin, Anton Dorfman, Sergey Fedonin, Ivan Kurnakov, Denis Goryushev). Coordination done by CERT@VDE." } ], "data_format": "MITRE", "data_type": "CVE", "data_version": "4.0", "description": { "description_data": [ { "lang": "eng", "value": "On WAGO PFC200 devices in different firmware versions with special crafted packets an attacker with network access to the device could cause a denial of service for the login service of the runtime." } ] }, "generator": { "engine": "Vulnogram 0.0.9" }, "impact": { "cvss": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "LOW", "baseScore": 5.3, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L", "version": "3.1" } }, "problemtype": { "problemtype_data": [ { "description": [ { "lang": "eng", "value": "CWE-770 Allocation of Resources Without Limits or Throttling" } ] } ] }, "references": { "reference_data": [ { "name": "https://cert.vde.com/en-us/advisories/vde-2021-014", "refsource": "CONFIRM", "url": "https://cert.vde.com/en-us/advisories/vde-2021-014" } ] }, "solution": [ { "lang": "en", "value": "WAGO recommends all effected users with CODESYS 2.3 Runtime PLCs to update to the firmware versions listed at https://cert.vde.com/en-us/advisories/vde-2021-014 in the solution paragraph." } ], "source": { "advisory": "VDE-2021-014", "defect": [ "VDE-2021-014" ], "discovery": "EXTERNAL" }, "work_around": [ { "lang": "en", "value": "Use general security best practices to protect systems from local and network attacks.\nDo not allow direct access to the device from untrusted networks.\nUpdate to the latest firmware according to the table in chapter solutions." } ] } } }, "cveMetadata": { "assignerOrgId": "270ccfa6-a436-4e77-922e-914ec3a9685c", "assignerShortName": "CERTVDE", "cveId": "CVE-2021-21000", "datePublished": "2021-05-24T11:05:05.975839Z", "dateReserved": "2020-12-17T00:00:00", "dateUpdated": "2024-09-16T18:43:52.677Z", "state": "PUBLISHED" }, "dataType": "CVE_RECORD", "dataVersion": "5.1" }
cve-2023-1619
Vulnerability from cvelistv5
Published
2023-06-26 06:18
Modified
2024-10-02 05:28
Severity ?
EPSS score ?
Summary
Multiple WAGO devices in multiple versions may allow an authenticated remote attacker with high privileges to DoS the device by sending a malformed packet.
References
▼ | URL | Tags |
---|---|---|
https://cert.vde.com/en/advisories/VDE-2023-006/ | vendor-advisory |
Impacted products
Vendor | Product | Version | ||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
▼ | Wago | 750-8202/xxx-xxx |
Version: FW1 < |
|||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
|
{ "containers": { "adp": [ { "providerMetadata": { "dateUpdated": "2024-08-02T05:57:24.337Z", "orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE" }, "references": [ { "tags": [ "vendor-advisory", "x_transferred" ], "url": "https://cert.vde.com/en/advisories/VDE-2023-006/" } ], "title": "CVE Program Container" } ], "cna": { "affected": [ { "defaultStatus": "unaffected", "product": "750-8202/xxx-xxx", "vendor": "Wago", "versions": [ { "lessThanOrEqual": "FW22 SP1", "status": "affected", "version": "FW1", "versionType": "custom" } ] }, { "defaultStatus": "unaffected", "product": "750-8203/xxx-xxx", "vendor": "Wago", "versions": [ { "lessThanOrEqual": "FW22 SP1", "status": "affected", "version": "FW1", "versionType": "custom" } ] }, { "defaultStatus": "unaffected", "product": "750-8204/xxx-xxx", "vendor": "Wago", "versions": [ { "lessThanOrEqual": "FW22 SP1", "status": "affected", "version": "FW1", "versionType": "custom" } ] }, { "defaultStatus": "unaffected", "product": "750-8206/xxx-xxx", "vendor": "Wago", "versions": [ { "lessThanOrEqual": "FW22 SP1", "status": "affected", "version": "FW1", "versionType": "custom" } ] }, { "defaultStatus": "unaffected", "product": "750-8207/xxx-xxx", "vendor": "Wago", "versions": [ { "lessThanOrEqual": "FW22 SP1", "status": "affected", "version": "FW1", "versionType": "custom" } ] }, { "defaultStatus": "unaffected", "product": "750-8208/xxx-xxx", "vendor": "Wago", "versions": [ { "lessThanOrEqual": "FW22 SP1", "status": "affected", "version": "FW1", "versionType": "custom" } ] }, { "defaultStatus": "unaffected", "product": "750-8210/xxx-xxx", "vendor": "Wago", "versions": [ { "lessThanOrEqual": "FW22 SP1", "status": "affected", "version": "FW1", "versionType": "custom" } ] }, { "defaultStatus": "unaffected", "product": "750-8211/xxx-xxx", "vendor": "Wago", "versions": [ { "lessThanOrEqual": "FW22 SP1", "status": "affected", "version": "FW1", "versionType": "custom" } ] }, { "defaultStatus": "unaffected", "product": "750-8212/xxx-xxx", "vendor": "Wago", "versions": [ { "lessThanOrEqual": "FW22 SP1", "status": "affected", "version": "FW1", "versionType": "custom" } ] }, { "defaultStatus": "unaffected", "product": "750-8213/xxx-xxx", "vendor": "Wago", "versions": [ { "lessThanOrEqual": "FW22 SP1", "status": "affected", "version": "FW1", "versionType": "custom" } ] }, { "defaultStatus": "unaffected", "product": "750-8214/xxx-xxx", "vendor": "Wago", "versions": [ { "lessThanOrEqual": "FW22 SP1", "status": "affected", "version": "FW1", "versionType": "custom" } ] }, { "defaultStatus": "unaffected", "product": "750-8216/xxx-xxx", "vendor": "Wago", "versions": [ { "lessThanOrEqual": "FW22 SP1", "status": "affected", "version": "FW1", "versionType": "custom" } ] }, { "defaultStatus": "unaffected", "product": "750-8217/xxx-xxx", "vendor": "Wago", "versions": [ { "lessThanOrEqual": "FW22 SP1", "status": "affected", "version": "FW1", "versionType": "custom" } ] }, { "defaultStatus": "unaffected", "product": "750-823", "vendor": "Wago", "versions": [ { "lessThanOrEqual": "FW10", "status": "affected", "version": "FW1", "versionType": "custom" } ] }, { "defaultStatus": "unaffected", "product": "750-332", "vendor": "Wago", "versions": [ { "lessThanOrEqual": "FW6", "status": "affected", "version": "FW1", "versionType": "custom" } ] }, { "defaultStatus": "unaffected", "product": "750-832/xxx-xxx", "vendor": "Wago", "versions": [ { "lessThanOrEqual": "FW6", "status": "affected", "version": "FW1", "versionType": "custom" } ] }, { "defaultStatus": "unaffected", "product": "750-862", "vendor": "Wago", "versions": [ { "lessThanOrEqual": "FW10", "status": "affected", "version": "FW1", "versionType": "custom" } ] }, { "defaultStatus": "unaffected", "product": "750-890/xxx-xxx", "vendor": "Wago", "versions": [ { "lessThanOrEqual": "FW10", "status": "affected", "version": "FW1", "versionType": "custom" } ] }, { "defaultStatus": "unaffected", "product": "750-891", "vendor": "Wago", "versions": [ { "lessThanOrEqual": "FW10", "status": "affected", "version": "FW1", "versionType": "custom" } ] }, { "defaultStatus": "unaffected", "product": "750-893", "vendor": "Wago", "versions": [ { "lessThanOrEqual": "FW10", "status": "affected", "version": "FW1", "versionType": "custom" } ] }, { "defaultStatus": "unaffected", "product": "750-331", "vendor": "Wago", "versions": [ { "lessThanOrEqual": "FW14", "status": "affected", "version": "FW1", "versionType": "custom" } ] }, { "defaultStatus": "unaffected", "product": "750-829", "vendor": "Wago", "versions": [ { "lessThanOrEqual": "FW14", "status": "affected", "version": "FW1", "versionType": "custom" } ] }, { "defaultStatus": "unaffected", "product": "750-831/xxx-xxx", "vendor": "Wago", "versions": [ { "lessThanOrEqual": "FW14", "status": "affected", "version": "FW1", "versionType": "custom" } ] }, { "defaultStatus": "unaffected", "product": "750-852", "vendor": "Wago", "versions": [ { "lessThanOrEqual": "FW16", "status": "affected", "version": "FW1", "versionType": "custom" } ] }, { "defaultStatus": "unaffected", "product": "750-880/xxx-xxx", "vendor": "Wago", "versions": [ { "lessThanOrEqual": "FW16", "status": "affected", "version": "FW1", "versionType": "custom" } ] }, { "defaultStatus": "unaffected", "product": "750-881", "vendor": "Wago", "versions": [ { "lessThanOrEqual": "FW16", "status": "affected", "version": "FW1", "versionType": "custom" } ] }, { "defaultStatus": "unaffected", "product": "750-882", "vendor": "Wago", "versions": [ { "lessThanOrEqual": "FW16", "status": "affected", "version": "FW1", "versionType": "custom" } ] }, { "defaultStatus": "unaffected", "product": "750-885/xxx-xxx", "vendor": "Wago", "versions": [ { "lessThanOrEqual": "FW16", "status": "affected", "version": "FW1", "versionType": "custom" } ] }, { "defaultStatus": "unaffected", "product": "750-889", "vendor": "Wago", "versions": [ { "lessThanOrEqual": "FW16", "status": "affected", "version": "FW1", "versionType": "custom" } ] } ], "credits": [ { "lang": "en", "type": "reporter", "user": "00000000-0000-4000-9000-000000000000", "value": "Daniel dos Santos from Forescout" }, { "lang": "en", "type": "reporter", "user": "00000000-0000-4000-9000-000000000000", "value": "Abdelrahman Hassanien from Forescout" } ], "descriptions": [ { "lang": "en", "supportingMedia": [ { "base64": false, "type": "text/html", "value": "Multiple WAGO devices in multiple versions may allow an authenticated remote attacker with high privileges to DoS the device by sending a malformed packet." } ], "value": "Multiple WAGO devices in multiple versions may allow an authenticated remote attacker with high privileges to DoS the device by sending a malformed packet." } ], "metrics": [ { "cvssV3_1": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 4.9, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "HIGH", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H", "version": "3.1" }, "format": "CVSS", "scenarios": [ { "lang": "en", "value": "GENERAL" } ] } ], "problemTypes": [ { "descriptions": [ { "cweId": "CWE-1288", "description": "CWE-1288 Improper Validation of Consistency within Input", "lang": "en", "type": "CWE" } ] } ], "providerMetadata": { "dateUpdated": "2024-10-02T05:28:23.250Z", "orgId": "270ccfa6-a436-4e77-922e-914ec3a9685c", "shortName": "CERTVDE" }, "references": [ { "tags": [ "vendor-advisory" ], "url": "https://cert.vde.com/en/advisories/VDE-2023-006/" } ], "source": { "advisory": "VDE-2023-006", "defect": [ "CERT@VDE#64417" ], "discovery": "UNKNOWN" }, "title": "WAGO: DoS in multiple versions of multiple products", "x_generator": { "engine": "Vulnogram 0.1.0-dev" } } }, "cveMetadata": { "assignerOrgId": "270ccfa6-a436-4e77-922e-914ec3a9685c", "assignerShortName": "CERTVDE", "cveId": "CVE-2023-1619", "datePublished": "2023-06-26T06:18:33.981Z", "dateReserved": "2023-03-24T10:12:25.218Z", "dateUpdated": "2024-10-02T05:28:23.250Z", "state": "PUBLISHED" }, "dataType": "CVE_RECORD", "dataVersion": "5.1" }
cve-2020-12505
Vulnerability from cvelistv5
Published
2020-09-30 15:43
Modified
2024-09-16 18:08
Severity ?
EPSS score ?
Summary
Improper Authentication vulnerability in WAGO 750-8XX series with FW version <= FW07 allows an attacker to change some special parameters without authentication. This issue affects: WAGO 750-852, WAGO 750-880/xxx-xxx, WAGO 750-881, WAGO 750-831/xxx-xxx, WAGO 750-882, WAGO 750-885/xxx-xxx, WAGO 750-889 in versions FW07 and below.
References
▼ | URL | Tags |
---|---|---|
https://cert.vde.com/en-us/advisories/vde-2020-027 | x_refsource_CONFIRM |
Impacted products
Vendor | Product | Version | ||||||||||||||||||||||||||||||||
---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
▼ | WAGO | 750-852 |
Version: unspecified < |
|||||||||||||||||||||||||||||||
|
{ "containers": { "adp": [ { "providerMetadata": { "dateUpdated": "2024-08-04T11:56:52.075Z", "orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE" }, "references": [ { "tags": [ "x_refsource_CONFIRM", "x_transferred" ], "url": "https://cert.vde.com/en-us/advisories/vde-2020-027" } ], "title": "CVE Program Container" } ], "cna": { "affected": [ { "product": "750-852", "vendor": "WAGO", "versions": [ { "lessThanOrEqual": "FW07", "status": "affected", "version": "unspecified", "versionType": "custom" } ] }, { "product": "750-880/xxx-xxx", "vendor": "WAGO", "versions": [ { "lessThanOrEqual": "FW07", "status": "affected", "version": "unspecified", "versionType": "custom" } ] }, { "product": "750-881", "vendor": "WAGO", "versions": [ { "lessThanOrEqual": "FW07", "status": "affected", "version": "unspecified", "versionType": "custom" } ] }, { "product": "750-831/xxx-xxx", "vendor": "WAGO", "versions": [ { "lessThanOrEqual": "FW07", "status": "affected", "version": "unspecified", "versionType": "custom" } ] }, { "product": "750-882", "vendor": "WAGO", "versions": [ { "lessThanOrEqual": "FW07", "status": "affected", "version": "unspecified", "versionType": "custom" } ] }, { "product": "750-885/xxx-xxx", "vendor": "WAGO", "versions": [ { "lessThanOrEqual": "FW07", "status": "affected", "version": "unspecified", "versionType": "custom" } ] }, { "product": "750-889", "vendor": "WAGO", "versions": [ { "lessThanOrEqual": "FW07", "status": "affected", "version": "unspecified", "versionType": "custom" } ] } ], "credits": [ { "lang": "en", "value": "Maxim Rupp (https://rupp.it) reported this vulnerability to WAGO." }, { "lang": "en", "value": "coordinated by CERT@VDE" } ], "datePublic": "2020-09-29T00:00:00", "descriptions": [ { "lang": "en", "value": "Improper Authentication vulnerability in WAGO 750-8XX series with FW version \u003c= FW07 allows an attacker to change some special parameters without authentication. This issue affects: WAGO 750-852, WAGO 750-880/xxx-xxx, WAGO 750-881, WAGO 750-831/xxx-xxx, WAGO 750-882, WAGO 750-885/xxx-xxx, WAGO 750-889 in versions FW07 and below." } ], "metrics": [ { "cvssV3_1": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 8.2, "baseSeverity": "HIGH", "confidentialityImpact": "NONE", "integrityImpact": "LOW", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H", "version": "3.1" } } ], "problemTypes": [ { "descriptions": [ { "cweId": "CWE-306", "description": "CWE-306 Missing Authentication for Critical Function", "lang": "en", "type": "CWE" } ] } ], "providerMetadata": { "dateUpdated": "2021-11-10T11:21:59", "orgId": "270ccfa6-a436-4e77-922e-914ec3a9685c", "shortName": "CERTVDE" }, "references": [ { "tags": [ "x_refsource_CONFIRM" ], "url": "https://cert.vde.com/en-us/advisories/vde-2020-027" } ], "solutions": [ { "lang": "en", "value": "Upgrade devices to the latest standard firmware (\u003e FW07)." } ], "source": { "advisory": "vde-2020-027", "defect": [ "vde-2020-027" ], "discovery": "EXTERNAL" }, "title": "WAGO: Vulnerability in web-based authentication in WAGO 750-8XX Version \u003c= FW07", "workarounds": [ { "lang": "en", "value": "Restrict network access to the device.\nDo not directly connect the device to the internet.\nDisable unused TCP/UDP ports.\nDisable web-based management ports 80/443 after the configuration phase" } ], "x_generator": { "engine": "Vulnogram 0.0.9" }, "x_legacyV4Record": { "CVE_data_meta": { "ASSIGNER": "info@cert.vde.com", "DATE_PUBLIC": "2020-09-29T22:00:00.000Z", "ID": "CVE-2020-12505", "STATE": "PUBLIC", "TITLE": "WAGO: Vulnerability in web-based authentication in WAGO 750-8XX Version \u003c= FW07" }, "affects": { "vendor": { "vendor_data": [ { "product": { "product_data": [ { "product_name": "750-852", "version": { "version_data": [ { "version_affected": "\u003c=", "version_value": "FW07" } ] } }, { "product_name": "750-880/xxx-xxx", "version": { "version_data": [ { "version_affected": "\u003c=", "version_value": "FW07" } ] } }, { "product_name": "750-881", "version": { "version_data": [ { "version_affected": "\u003c=", "version_value": "FW07" } ] } }, { "product_name": "750-831/xxx-xxx", "version": { "version_data": [ { "version_affected": "\u003c=", "version_value": "FW07" } ] } }, { "product_name": "750-882", "version": { "version_data": [ { "version_affected": "\u003c=", "version_value": "FW07" } ] } }, { "product_name": "750-885/xxx-xxx", "version": { "version_data": [ { "version_affected": "\u003c=", "version_value": "FW07" } ] } }, { "product_name": "750-889", "version": { "version_data": [ { "version_affected": "\u003c=", "version_value": "FW07" } ] } } ] }, "vendor_name": "WAGO" } ] } }, "credit": [ { "lang": "eng", "value": "Maxim Rupp (https://rupp.it) reported this vulnerability to WAGO." }, { "lang": "eng", "value": "coordinated by CERT@VDE" } ], "data_format": "MITRE", "data_type": "CVE", "data_version": "4.0", "description": { "description_data": [ { "lang": "eng", "value": "Improper Authentication vulnerability in WAGO 750-8XX series with FW version \u003c= FW07 allows an attacker to change some special parameters without authentication. This issue affects: WAGO 750-852, WAGO 750-880/xxx-xxx, WAGO 750-881, WAGO 750-831/xxx-xxx, WAGO 750-882, WAGO 750-885/xxx-xxx, WAGO 750-889 in versions FW07 and below." } ] }, "generator": { "engine": "Vulnogram 0.0.9" }, "impact": { "cvss": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 8.2, "baseSeverity": "HIGH", "confidentialityImpact": "NONE", "integrityImpact": "LOW", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H", "version": "3.1" } }, "problemtype": { "problemtype_data": [ { "description": [ { "lang": "eng", "value": "CWE-306 Missing Authentication for Critical Function" } ] } ] }, "references": { "reference_data": [ { "name": "https://cert.vde.com/en-us/advisories/vde-2020-027", "refsource": "CONFIRM", "url": "https://cert.vde.com/en-us/advisories/vde-2020-027" } ] }, "solution": [ { "lang": "en", "value": "Upgrade devices to the latest standard firmware (\u003e FW07)." } ], "source": { "advisory": "vde-2020-027", "defect": [ "vde-2020-027" ], "discovery": "EXTERNAL" }, "work_around": [ { "lang": "en", "value": "Restrict network access to the device.\nDo not directly connect the device to the internet.\nDisable unused TCP/UDP ports.\nDisable web-based management ports 80/443 after the configuration phase" } ] } } }, "cveMetadata": { "assignerOrgId": "270ccfa6-a436-4e77-922e-914ec3a9685c", "assignerShortName": "CERTVDE", "cveId": "CVE-2020-12505", "datePublished": "2020-09-30T15:43:20.359532Z", "dateReserved": "2020-04-30T00:00:00", "dateUpdated": "2024-09-16T18:08:56.055Z", "state": "PUBLISHED" }, "dataType": "CVE_RECORD", "dataVersion": "5.1" }
Vulnerability from fkie_nvd
Published
2020-09-30 16:15
Modified
2024-11-21 04:59
Severity ?
8.2 (High) - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H
9.1 (Critical) - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H
9.1 (Critical) - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H
Summary
Improper Authentication vulnerability in WAGO 750-8XX series with FW version <= FW07 allows an attacker to change some special parameters without authentication. This issue affects: WAGO 750-852, WAGO 750-880/xxx-xxx, WAGO 750-881, WAGO 750-831/xxx-xxx, WAGO 750-882, WAGO 750-885/xxx-xxx, WAGO 750-889 in versions FW07 and below.
References
▼ | URL | Tags | |
---|---|---|---|
info@cert.vde.com | https://cert.vde.com/en-us/advisories/vde-2020-027 | Third Party Advisory | |
af854a3a-2127-422b-91ae-364da2661108 | https://cert.vde.com/en-us/advisories/vde-2020-027 | Third Party Advisory |
Impacted products
Vendor | Product | Version | |
---|---|---|---|
wago | 750-852_firmware | * | |
wago | 750-852 | - | |
wago | 750-880_firmware | * | |
wago | 750-880 | - | |
wago | 750-881_firmware | * | |
wago | 750-881 | - | |
wago | 750-831_firmware | * | |
wago | 750-831 | - | |
wago | 750-882_firmware | * | |
wago | 750-882 | - | |
wago | 750-885_firmware | * | |
wago | 750-885 | - | |
wago | 750-889_firmware | * | |
wago | 750-889 | - |
{ "configurations": [ { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:wago:750-852_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "ED404720-0042-42AB-9125-4CDF2D02D44E", "versionEndIncluding": "fw07", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:wago:750-852:-:*:*:*:*:*:*:*", "matchCriteriaId": "9D6739E1-EF0B-48EE-90FC-5708756FC362", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:wago:750-880_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "AEB9FB33-B34B-4904-A9E5-795BBAC5EAEF", "versionEndIncluding": "fw07", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:wago:750-880:-:*:*:*:*:*:*:*", "matchCriteriaId": "CFEAC4D9-15CF-44B8-844D-C012AA4637A2", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:wago:750-881_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "987FDB58-A501-4F70-B7F1-0F3E0845EFD7", "versionEndIncluding": "fw07", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:wago:750-881:-:*:*:*:*:*:*:*", "matchCriteriaId": "6FE51647-62C1-4D3C-91FA-13ACA6CD71D2", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:wago:750-831_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "4C33ED3A-C5D8-4276-B896-665642A6BD51", "versionEndIncluding": "fw07", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:wago:750-831:-:*:*:*:*:*:*:*", "matchCriteriaId": "F0631884-FF6F-4AA9-9D76-CDECB5A738FC", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:wago:750-882_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "F46D5249-6418-4FF9-B980-85BB6211D939", "versionEndIncluding": "fw07", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:wago:750-882:-:*:*:*:*:*:*:*", "matchCriteriaId": "B1379D65-F376-4618-B708-5E59D64C8033", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:wago:750-885_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "7521A675-86D6-4EEA-8D26-E8702CA426B3", "versionEndIncluding": "fw07", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:wago:750-885:-:*:*:*:*:*:*:*", "matchCriteriaId": "7712F56E-AEBA-4DE0-9172-26F3D29B369B", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:wago:750-889_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "10BC697F-D2B2-4D95-A67C-87E4499919EE", "versionEndIncluding": "fw07", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:wago:750-889:-:*:*:*:*:*:*:*", "matchCriteriaId": "57919AAB-2962-4543-810A-C143300351F8", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" } ], "cveTags": [], "descriptions": [ { "lang": "en", "value": "Improper Authentication vulnerability in WAGO 750-8XX series with FW version \u003c= FW07 allows an attacker to change some special parameters without authentication. This issue affects: WAGO 750-852, WAGO 750-880/xxx-xxx, WAGO 750-881, WAGO 750-831/xxx-xxx, WAGO 750-882, WAGO 750-885/xxx-xxx, WAGO 750-889 in versions FW07 and below." }, { "lang": "es", "value": "La vulnerabilidad de autenticaci\u00f3n inadecuada en la serie WAGO 750-8XX con versi\u00f3n FW anteriores o iguales a FW07 permite a un atacante cambiar algunos par\u00e1metros especiales sin autenticaci\u00f3n. Este problema afecta a: WAGO 750-852, WAGO 750-880/xxx-xxx, WAGO 750-881, WAGO 750-831/xxx-xxx, WAGO 750-882, WAGO 750-885/xxx-xxx, WAGO 750-889 en versiones FW07 y anteriores" } ], "id": "CVE-2020-12505", "lastModified": "2024-11-21T04:59:49.510", "metrics": { "cvssMetricV2": [ { "acInsufInfo": false, "baseSeverity": "MEDIUM", "cvssData": { "accessComplexity": "LOW", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "PARTIAL", "baseScore": 6.4, "confidentialityImpact": "NONE", "integrityImpact": "PARTIAL", "vectorString": "AV:N/AC:L/Au:N/C:N/I:P/A:P", "version": "2.0" }, "exploitabilityScore": 10.0, "impactScore": 4.9, "obtainAllPrivilege": false, "obtainOtherPrivilege": false, "obtainUserPrivilege": false, "source": "nvd@nist.gov", "type": "Primary", "userInteractionRequired": false } ], "cvssMetricV31": [ { "cvssData": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 8.2, "baseSeverity": "HIGH", "confidentialityImpact": "NONE", "integrityImpact": "LOW", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H", "version": "3.1" }, "exploitabilityScore": 3.9, "impactScore": 4.2, "source": "info@cert.vde.com", "type": "Secondary" }, { "cvssData": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 9.1, "baseSeverity": "CRITICAL", "confidentialityImpact": "NONE", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H", "version": "3.1" }, "exploitabilityScore": 3.9, "impactScore": 5.2, "source": "nvd@nist.gov", "type": "Secondary" } ] }, "published": "2020-09-30T16:15:12.670", "references": [ { "source": "info@cert.vde.com", "tags": [ "Third Party Advisory" ], "url": "https://cert.vde.com/en-us/advisories/vde-2020-027" }, { "source": "af854a3a-2127-422b-91ae-364da2661108", "tags": [ "Third Party Advisory" ], "url": "https://cert.vde.com/en-us/advisories/vde-2020-027" } ], "sourceIdentifier": "info@cert.vde.com", "vulnStatus": "Modified", "weaknesses": [ { "description": [ { "lang": "en", "value": "CWE-306" } ], "source": "info@cert.vde.com", "type": "Primary" }, { "description": [ { "lang": "en", "value": "CWE-306" } ], "source": "nvd@nist.gov", "type": "Secondary" } ] }
Vulnerability from fkie_nvd
Published
2023-06-26 07:15
Modified
2024-11-21 07:39
Severity ?
4.9 (Medium) - CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H
4.9 (Medium) - CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H
4.9 (Medium) - CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H
Summary
Multiple WAGO devices in multiple versions may allow an authenticated remote attacker with high privileges to DoS the device by sending a specifically crafted packet to the CODESYS V2 runtime.
References
▼ | URL | Tags | |
---|---|---|---|
info@cert.vde.com | https://cert.vde.com/en/advisories/VDE-2023-006/ | Mitigation, Third Party Advisory | |
af854a3a-2127-422b-91ae-364da2661108 | https://cert.vde.com/en/advisories/VDE-2023-006/ | Mitigation, Third Party Advisory |
Impacted products
{ "configurations": [ { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:wago:750-331_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "1F6E0849-BB68-41FD-8A8F-0D1C2706CAEC", "versionEndExcluding": "fw17", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:wago:750-331:-:*:*:*:*:*:*:*", "matchCriteriaId": "907712D2-72A3-46EB-9438-B35A2880E7BD", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:wago:750-8202_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "551C0E63-CF9E-444C-AE0C-100A97ECC9B1", "versionEndExcluding": "fw22", "vulnerable": true }, { "criteria": "cpe:2.3:o:wago:750-8202_firmware:fw22:-:*:*:*:*:*:*", "matchCriteriaId": "4284AF6B-DAA7-49FF-AA76-D7E7DFDFE07B", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:wago:750-8202:-:*:*:*:*:*:*:*", "matchCriteriaId": "23B02096-81A5-4823-94F3-D87F389397DE", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:wago:750-8202\\/000-011_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "47549C97-D522-4AD7-BD23-9D2F3C72132E", "versionEndExcluding": "fw22", "vulnerable": true }, { "criteria": "cpe:2.3:o:wago:750-8202\\/000-011_firmware:fw22:-:*:*:*:*:*:*", "matchCriteriaId": "397706F7-F98A-4121-9FBA-DD1535E6E404", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:wago:750-8202\\/000-011:-:*:*:*:*:*:*:*", "matchCriteriaId": "A4B47DFA-BEAB-45F1-A590-14F229E8DF04", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:wago:750-8202\\/000-012_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "8D714E6B-11E5-4B0F-82C1-23E5118C56D1", "versionEndExcluding": "fw22", "vulnerable": true }, { "criteria": "cpe:2.3:o:wago:750-8202\\/000-012_firmware:fw22:-:*:*:*:*:*:*", "matchCriteriaId": "F942D64E-3EB4-4D31-813D-0B59F79A7720", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:wago:750-8202\\/000-012:-:*:*:*:*:*:*:*", "matchCriteriaId": "B3D005CB-5D55-4142-8A5B-A005AC2FC239", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:wago:750-8202\\/000-022_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "C62B2C95-B80C-4078-A303-55055D915424", "versionEndExcluding": "fw22", "vulnerable": true }, { "criteria": "cpe:2.3:o:wago:750-8202\\/000-022_firmware:fw22:-:*:*:*:*:*:*", "matchCriteriaId": "96DA2FAA-022A-4B40-A465-C5F812B946E0", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:wago:750-8202\\/000-022:-:*:*:*:*:*:*:*", "matchCriteriaId": "38796792-5D69-41BA-84B8-792151B1FC6B", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:wago:750-8202\\/025-000_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "1101B5D8-D3AA-4942-A0CB-FD310F70C775", "versionEndExcluding": "fw22", "vulnerable": true }, { "criteria": "cpe:2.3:o:wago:750-8202\\/025-000_firmware:fw22:-:*:*:*:*:*:*", "matchCriteriaId": "FC3F904C-D7B5-44C9-A911-13820A1BC69B", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:wago:750-8202\\/025-000:-:*:*:*:*:*:*:*", "matchCriteriaId": "1FC647C3-A602-412F-A4DA-5ED092E2779C", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:wago:750-8202\\/025-001_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "89CF4D3F-91EE-4868-BD4B-2FDB6F8D9498", "versionEndExcluding": "fw22", "vulnerable": true }, { "criteria": "cpe:2.3:o:wago:750-8202\\/025-001_firmware:fw22:-:*:*:*:*:*:*", "matchCriteriaId": "3FEFA258-B6DA-4503-BE34-54554063D3B4", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:wago:750-8202\\/025-001:-:*:*:*:*:*:*:*", "matchCriteriaId": "F5B99800-C5E6-4001-BCBA-2DB5E3CF7D8D", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:wago:750-8202\\/025-002_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "8B800FD6-2D36-454F-80CF-AECED093BBDA", "versionEndExcluding": "fw22", "vulnerable": true }, { "criteria": "cpe:2.3:o:wago:750-8202\\/025-002_firmware:fw22:-:*:*:*:*:*:*", "matchCriteriaId": "6DAB7507-A773-4C8B-A1C8-DB1F861A3143", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:wago:750-8202\\/025-002:-:*:*:*:*:*:*:*", "matchCriteriaId": "DEF4C2B9-4C44-4F83-B0D5-220A1525D254", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:wago:750-8202\\/040-000_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "CAE570A8-B25C-433A-8046-BE71FC57BDCB", "versionEndExcluding": "fw22", "vulnerable": true }, { "criteria": "cpe:2.3:o:wago:750-8202\\/040-000_firmware:fw22:-:*:*:*:*:*:*", "matchCriteriaId": "48FC9087-237B-4F9F-BC53-01322015012B", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:wago:750-8202\\/040-000:-:*:*:*:*:*:*:*", "matchCriteriaId": "977A1B79-8D15-49D8-8C58-F7B1FFDF0E8D", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:wago:750-8202\\/040-001_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "F9805EF8-11F5-40BF-8F0E-616E0FD11B11", "versionEndExcluding": "fw22", "vulnerable": true }, { "criteria": "cpe:2.3:o:wago:750-8202\\/040-001_firmware:fw22:-:*:*:*:*:*:*", "matchCriteriaId": "159DAB8C-820E-4559-B56A-23E50FD30D24", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:wago:750-8202\\/040-001:-:*:*:*:*:*:*:*", "matchCriteriaId": "D4E35ACF-6C0A-4C9F-83A8-6CBAF927BE43", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:wago:750-8203_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "145EA515-9E1D-40AA-BA23-555356477CDD", "versionEndExcluding": "fw22", "vulnerable": true }, { "criteria": "cpe:2.3:o:wago:750-8203_firmware:fw22:-:*:*:*:*:*:*", "matchCriteriaId": "7852260B-66A5-494F-BE4E-6A01DE311F17", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:wago:750-8203:-:*:*:*:*:*:*:*", "matchCriteriaId": "EC428EC8-532A-4825-BCE3-C42A4BC01C68", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:wago:750-8203\\/025-000_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "59E9F43D-7933-4212-9518-7C6BF289ED12", "versionEndExcluding": "fw22", "vulnerable": true }, { "criteria": "cpe:2.3:o:wago:750-8203\\/025-000_firmware:fw22:-:*:*:*:*:*:*", "matchCriteriaId": "ED9A618C-BFEF-4A95-8E8C-FCB781900A83", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:wago:750-8203\\/025-000:-:*:*:*:*:*:*:*", "matchCriteriaId": "D2E35209-C3F2-4251-9CB5-094FA9B0D076", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:wago:750-8204_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "D1C9543F-3013-46F6-A7C0-618EE8EC6754", "versionEndExcluding": "fw22", "vulnerable": true }, { "criteria": "cpe:2.3:o:wago:750-8204_firmware:fw22:-:*:*:*:*:*:*", "matchCriteriaId": "60DFC0BC-2EA6-49C8-9AC6-4406C6CA0EE3", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:wago:750-8204:-:*:*:*:*:*:*:*", "matchCriteriaId": "7AF14BE1-1EB5-423B-9FE7-E401AEF92553", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:wago:750-8204\\/025-000_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "037047A8-7B3B-48A2-8B65-84C6C502D59C", "versionEndExcluding": "fw22", "vulnerable": true }, { "criteria": "cpe:2.3:o:wago:750-8204\\/025-000_firmware:fw22:-:*:*:*:*:*:*", "matchCriteriaId": "FAA7FFE7-69D8-44E2-A9DA-297B713AF666", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:wago:750-8204\\/025-000:-:*:*:*:*:*:*:*", "matchCriteriaId": "40B3E682-F1FD-4ADD-B1B8-89D7BA93B3FD", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:wago:750-8206_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "4CFE1CFA-E10A-4BBC-8A6A-6C08D4AC43D8", "versionEndExcluding": "fw22", "vulnerable": true }, { "criteria": "cpe:2.3:o:wago:750-8206_firmware:fw22:-:*:*:*:*:*:*", "matchCriteriaId": "13EEE4AE-0D12-4096-A0D1-8215A25FC2D6", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:wago:750-8206:-:*:*:*:*:*:*:*", "matchCriteriaId": "2E17ECC4-D7AE-485C-A2EF-4148817F9DB8", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:wago:750-8206\\/025-000_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "EC5AB00E-1770-46FC-A36D-36D883087AA0", "versionEndExcluding": "fw22", "vulnerable": true }, { "criteria": "cpe:2.3:o:wago:750-8206\\/025-000_firmware:fw22:-:*:*:*:*:*:*", "matchCriteriaId": "8D54BB0C-B81E-4C76-9047-49D8F50CFB98", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:wago:750-8206\\/025-000:-:*:*:*:*:*:*:*", "matchCriteriaId": "6196935C-97E0-40A2-AF06-03CB72E40B0E", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:wago:750-8206\\/025-001_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "B15148A7-84AA-4A3E-8848-D881A5398CC7", "versionEndExcluding": "fw22", "vulnerable": true }, { "criteria": "cpe:2.3:o:wago:750-8206\\/025-001_firmware:fw22:-:*:*:*:*:*:*", "matchCriteriaId": "78ABEF5A-B2DD-4702-8DA2-5944D7A40891", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:wago:750-8206\\/025-001:-:*:*:*:*:*:*:*", "matchCriteriaId": "1E2892D5-A691-48A9-ACC9-236A50E6A40E", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:wago:750-8206\\/040-000_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "0131DC36-2979-4B4D-B2D1-57C53C409FB3", "versionEndExcluding": "fw22", "vulnerable": true }, { "criteria": "cpe:2.3:o:wago:750-8206\\/040-000_firmware:fw22:-:*:*:*:*:*:*", "matchCriteriaId": "EEFF4CAF-9D93-483E-82B6-D3B6F591AFAC", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:wago:750-8206\\/040-000:-:*:*:*:*:*:*:*", "matchCriteriaId": "49A39AFE-BC17-4A09-ABCE-271C2BB9AA07", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:wago:750-8206\\/040-001_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "0CD59B67-49A3-4A01-A714-C5E0BE076242", "versionEndExcluding": "fw22", "vulnerable": true }, { "criteria": "cpe:2.3:o:wago:750-8206\\/040-001_firmware:fw22:-:*:*:*:*:*:*", "matchCriteriaId": "85A051E1-616B-4E3F-8F53-5B2A5AB1528F", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:wago:750-8206\\/040-001:-:*:*:*:*:*:*:*", "matchCriteriaId": "B851D224-DFC0-4D96-AE88-0B7AF75FBCD8", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:wago:750-8207_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "A003635E-1ED0-486A-BC9F-DA52B8A950D8", "versionEndExcluding": "fw22", "vulnerable": true }, { "criteria": "cpe:2.3:o:wago:750-8207_firmware:fw22:-:*:*:*:*:*:*", "matchCriteriaId": "B34A1422-48B2-4471-9DAF-AF9D3B71892C", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:wago:750-8207:-:*:*:*:*:*:*:*", "matchCriteriaId": "DA98A0D9-B050-430B-96C5-15932438FD3A", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:wago:750-8207\\/025-000_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "7399A811-0861-4A43-90A6-013CEB77081D", "versionEndExcluding": "fw22", "vulnerable": true }, { "criteria": "cpe:2.3:o:wago:750-8207\\/025-000_firmware:fw22:-:*:*:*:*:*:*", "matchCriteriaId": "2C03CCC8-6645-454E-A9D1-E7ABDCBE5CD6", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:wago:750-8207\\/025-000:-:*:*:*:*:*:*:*", "matchCriteriaId": "6F56DA20-D82B-48C7-B4AD-8534367E8D83", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:wago:750-8207\\/025-001_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "854DDAAE-F8E0-4A65-AF7C-314FFCAC25DC", "versionEndExcluding": "fw22", "vulnerable": true }, { "criteria": "cpe:2.3:o:wago:750-8207\\/025-001_firmware:fw22:-:*:*:*:*:*:*", "matchCriteriaId": "3254AF58-A730-4300-8981-F2228A0AAD29", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:wago:750-8207\\/025-001:-:*:*:*:*:*:*:*", "matchCriteriaId": "5C5C4BAD-7268-4367-A112-60E1A2EF6AF3", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:wago:750-8208_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "34480DD4-C1AA-4B62-A7B5-FB54D985E86E", "versionEndExcluding": "fw22", "vulnerable": true }, { "criteria": "cpe:2.3:o:wago:750-8208_firmware:fw22:-:*:*:*:*:*:*", "matchCriteriaId": "AC9A829B-22F4-4885-AF1D-00F683C559EA", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:wago:750-8208:-:*:*:*:*:*:*:*", "matchCriteriaId": "C86098FC-E63E-4676-8BA1-ADCA30795558", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:wago:750-8208\\/025-000_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "F8D92116-99B7-438D-B1EE-0F168C74F7A2", "versionEndExcluding": "fw22", "vulnerable": true }, { "criteria": "cpe:2.3:o:wago:750-8208\\/025-000_firmware:fw22:-:*:*:*:*:*:*", "matchCriteriaId": "45BB3361-53C4-4F90-964A-7665C5897CAD", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:wago:750-8208\\/025-000:-:*:*:*:*:*:*:*", "matchCriteriaId": "8FFE4FF4-4EE4-493F-A8CF-968215142EF4", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:wago:750-8208\\/025-001_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "6ADD951D-6F50-48A8-88EF-F607703CA25A", "versionEndExcluding": "fw22", "vulnerable": true }, { "criteria": "cpe:2.3:o:wago:750-8208\\/025-001_firmware:fw22:-:*:*:*:*:*:*", "matchCriteriaId": "16246BD0-7D69-44D5-BFF0-1F204BB44B22", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:wago:750-8208\\/025-001:-:*:*:*:*:*:*:*", "matchCriteriaId": "B32F6244-FB19-4629-BCAB-A544C031E4BA", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:wago:750-8210_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "5D02C139-E2A7-4213-A1EF-582220F614EC", "versionEndExcluding": "fw22", "vulnerable": true }, { "criteria": "cpe:2.3:o:wago:750-8210_firmware:fw22:-:*:*:*:*:*:*", "matchCriteriaId": "929C02C9-5772-4B2D-A665-CE748CF7A526", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:wago:750-8210:-:*:*:*:*:*:*:*", "matchCriteriaId": "1E11758B-46C3-4E57-943A-C9C073AE5211", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:wago:750-8210\\/025-000_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "46EC94CF-1060-4949-94B6-E34650419E3D", "versionEndExcluding": "fw22", "vulnerable": true }, { "criteria": "cpe:2.3:o:wago:750-8210\\/025-000_firmware:fw22:-:*:*:*:*:*:*", "matchCriteriaId": "53A03E53-F39D-4F12-A79A-D6DF8F8CD403", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:wago:750-8210\\/025-000:-:*:*:*:*:*:*:*", "matchCriteriaId": "CF7C8131-3BE2-4515-81F0-1C7644B622B3", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:wago:750-8210\\/040-000_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "4AED674D-16EC-4E8E-97BA-CB39B0019D60", "versionEndExcluding": "fw22", "vulnerable": true }, { "criteria": "cpe:2.3:o:wago:750-8210\\/040-000_firmware:fw22:-:*:*:*:*:*:*", "matchCriteriaId": "95E73EC7-08A5-420C-8E18-22FE18440EC7", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:wago:750-8210\\/040-000:-:*:*:*:*:*:*:*", "matchCriteriaId": "50421963-086D-4B34-BCDA-1EA971708B73", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:wago:750-8211_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "7A154FD7-45ED-4B3D-A445-E31FFC8C1C08", "versionEndExcluding": "fw22", "vulnerable": true }, { "criteria": "cpe:2.3:o:wago:750-8211_firmware:fw22:-:*:*:*:*:*:*", "matchCriteriaId": "690B3B52-9119-469F-9DFB-CF4D787BC540", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:wago:750-8211:-:*:*:*:*:*:*:*", "matchCriteriaId": "5CD6B267-3E4B-4597-82A6-130D6F21C728", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:wago:750-8211\\/040-000_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "E85C90EB-9603-4C3E-BEFC-B4C387214305", "versionEndExcluding": "fw22", "vulnerable": true }, { "criteria": "cpe:2.3:o:wago:750-8211\\/040-000_firmware:fw22:-:*:*:*:*:*:*", "matchCriteriaId": "C06578AE-D8EC-4EA5-A2EA-7EDA7F967186", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:wago:750-8211\\/040-000:-:*:*:*:*:*:*:*", "matchCriteriaId": "4921C3E3-0ED0-4ECB-B791-BE3AE48D6F92", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:wago:750-8211\\/040-001_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "482B61FF-6456-446D-88B6-ED5058995C43", "versionEndExcluding": "fw22", "vulnerable": true }, { "criteria": "cpe:2.3:o:wago:750-8211\\/040-001_firmware:fw22:-:*:*:*:*:*:*", "matchCriteriaId": "C228D9F9-D78B-428F-875E-D1E99C7D76BA", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:wago:750-8211\\/040-001:-:*:*:*:*:*:*:*", "matchCriteriaId": "C8E6D37B-E7CF-401E-86F0-0E17694CF3C3", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:wago:750-8212_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "5C88AE5A-9B49-4E0E-B0BB-EE904DB7DAFA", "versionEndExcluding": "fw22", "vulnerable": true }, { "criteria": "cpe:2.3:o:wago:750-8212_firmware:fw22:-:*:*:*:*:*:*", "matchCriteriaId": "CBE28488-099B-414B-8778-A1B6EBB3D609", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:wago:750-8212:-:*:*:*:*:*:*:*", "matchCriteriaId": "20BBC380-0F6E-4400-93AF-5B6CFEF00562", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:wago:750-8212\\/000-100_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "8C45DC9B-3AE4-4D63-ACD4-CA4EAA47F3D9", "versionEndExcluding": "fw22", "vulnerable": true }, { "criteria": "cpe:2.3:o:wago:750-8212\\/000-100_firmware:fw22:-:*:*:*:*:*:*", "matchCriteriaId": "F39F0363-0C7F-4ACC-A90E-4A751A3A5A5E", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:wago:750-8212\\/000-100:-:*:*:*:*:*:*:*", "matchCriteriaId": "5F356952-B865-49D8-889C-0A696E754C96", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:wago:750-8212\\/025-000_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "A996843E-1CA8-40ED-9A55-0EEC8FB60C4F", "versionEndExcluding": "fw22", "vulnerable": true }, { "criteria": "cpe:2.3:o:wago:750-8212\\/025-000_firmware:fw22:-:*:*:*:*:*:*", "matchCriteriaId": "CDB27987-1EA0-48EA-AFF1-BCC31D14752F", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:wago:750-8212\\/025-000:-:*:*:*:*:*:*:*", "matchCriteriaId": "31B9A7B1-2457-44E7-9753-DC5828281892", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:wago:750-8212\\/025-001_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "AB2D7529-BA14-41AF-992A-4472A0A205F8", "versionEndExcluding": "fw22", "vulnerable": true }, { "criteria": "cpe:2.3:o:wago:750-8212\\/025-001_firmware:fw22:-:*:*:*:*:*:*", "matchCriteriaId": "44E48D9C-56FB-4212-9A46-42CF64946DAD", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:wago:750-8212\\/025-001:-:*:*:*:*:*:*:*", "matchCriteriaId": "9EC1F538-875D-4337-A42E-A837173B30FF", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:wago:750-8212\\/025-002_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "718C1B8C-A4A1-4119-8060-1E2D6EE51FF8", "versionEndExcluding": "fw22", "vulnerable": true }, { "criteria": "cpe:2.3:o:wago:750-8212\\/025-002_firmware:fw22:-:*:*:*:*:*:*", "matchCriteriaId": "52F43D9D-D8DA-4AA5-992F-A5D4627D34C1", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:wago:750-8212\\/025-002:-:*:*:*:*:*:*:*", "matchCriteriaId": "A81CC3BB-60A3-451F-BC34-F1D03517B0E1", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:wago:750-8212\\/040-000_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "680FF2B0-B05A-4D5D-B101-1E6D593D6098", "versionEndExcluding": "fw22", "vulnerable": true }, { "criteria": "cpe:2.3:o:wago:750-8212\\/040-000_firmware:fw22:-:*:*:*:*:*:*", "matchCriteriaId": "CCE148ED-96A8-4ED3-A324-97CA995C5D8D", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:wago:750-8212\\/040-000:-:*:*:*:*:*:*:*", "matchCriteriaId": "26478046-3D53-45DB-B5B9-EE160383C9E2", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:wago:750-8212\\/040-001_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "CD2ECEBF-4B8B-4DC8-B770-4E383D87F1EE", "versionEndExcluding": "fw22", "vulnerable": true }, { "criteria": "cpe:2.3:o:wago:750-8212\\/040-001_firmware:fw22:-:*:*:*:*:*:*", "matchCriteriaId": "FF25820F-B641-4442-9886-61E81DD8B96D", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:wago:750-8212\\/040-001:-:*:*:*:*:*:*:*", "matchCriteriaId": "F94E5197-2913-488F-8E9C-AA14A4976726", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:wago:750-8212\\/040-010_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "321053FC-764E-4173-ACA6-E8EA9B87C578", "versionEndExcluding": "fw22", "vulnerable": true }, { "criteria": "cpe:2.3:o:wago:750-8212\\/040-010_firmware:fw22:-:*:*:*:*:*:*", "matchCriteriaId": "B700EE5E-EFEF-4F55-AD40-1DD6B4CE8924", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:wago:750-8212\\/040-010:-:*:*:*:*:*:*:*", "matchCriteriaId": "DF110184-7737-417A-8C9C-2F30FA8091C0", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:wago:750-8213_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "691C2432-2CAB-4E7F-917E-89CE7B030B03", "versionEndExcluding": "fw22", "vulnerable": true }, { "criteria": "cpe:2.3:o:wago:750-8213_firmware:fw22:-:*:*:*:*:*:*", "matchCriteriaId": "CBD60215-E245-4D59-BE3F-C775A815CBD9", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:wago:750-8213:-:*:*:*:*:*:*:*", "matchCriteriaId": "4969E8EB-EF09-47B9-8F03-37BB87CFD048", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:wago:750-8213\\/040-010_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "B60744FF-419F-42B4-8967-E110454B21A1", "versionEndExcluding": "fw22", "vulnerable": true }, { "criteria": "cpe:2.3:o:wago:750-8213\\/040-010_firmware:fw22:-:*:*:*:*:*:*", "matchCriteriaId": "4F8EBA7B-A9E0-4800-AB8E-9E2D4AE6947A", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:wago:750-8213\\/040-010:-:*:*:*:*:*:*:*", "matchCriteriaId": "764647F1-F01F-42CD-94B6-D46494BDC1A0", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:wago:750-8214_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "48797000-3235-4411-972F-0D1985F74010", "versionEndExcluding": "fw22", "vulnerable": true }, { "criteria": "cpe:2.3:o:wago:750-8214_firmware:fw22:-:*:*:*:*:*:*", "matchCriteriaId": "3DF9F583-33AD-43EF-904B-386AB358BC11", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:wago:750-8214:-:*:*:*:*:*:*:*", "matchCriteriaId": "979A8E43-4285-4A7B-BB0B-E6888117862C", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:wago:750-8215_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "051EDF25-11BE-450F-9277-B88470DBFF9B", "versionEndExcluding": "fw22", "vulnerable": true }, { "criteria": "cpe:2.3:o:wago:750-8215_firmware:fw22:-:*:*:*:*:*:*", "matchCriteriaId": "47B06BC7-C2DA-4154-90F3-1D623AC8B63E", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:wago:750-8215:-:*:*:*:*:*:*:*", "matchCriteriaId": "577EDC26-671C-4703-BBF0-FE93AFEA81E1", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:wago:750-8216_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "C17D1808-B2DF-4BA1-8B12-46F8C0A051F2", "versionEndExcluding": "fw22", "vulnerable": true }, { "criteria": "cpe:2.3:o:wago:750-8216_firmware:fw22:-:*:*:*:*:*:*", "matchCriteriaId": "D55A6726-A0FB-4A28-9C39-AA42715820C5", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:wago:750-8216:-:*:*:*:*:*:*:*", "matchCriteriaId": "3B854F74-173E-4523-BBA7-8FF7A9B9880E", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:wago:750-8216\\/025-000_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "6361C48B-DAF1-4AA7-B572-4B3D5CEB4BEF", "versionEndExcluding": "fw22", "vulnerable": true }, { "criteria": "cpe:2.3:o:wago:750-8216\\/025-000_firmware:fw22:-:*:*:*:*:*:*", "matchCriteriaId": "31650753-ECA0-45A9-8FEE-379FE198588A", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:wago:750-8216\\/025-000:-:*:*:*:*:*:*:*", "matchCriteriaId": "FAD81900-6337-4EB9-ABA5-836452AF3E59", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:wago:750-8216\\/025-001_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "6D85C0BB-B674-4756-A4E5-0916A288B7CE", "versionEndExcluding": "fw22", "vulnerable": true }, { "criteria": "cpe:2.3:o:wago:750-8216\\/025-001_firmware:fw22:-:*:*:*:*:*:*", "matchCriteriaId": "25D494F5-4FA3-4357-AD1B-42E0552EE318", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:wago:750-8216\\/025-001:-:*:*:*:*:*:*:*", "matchCriteriaId": "E3ED9EED-726C-4217-ABFE-CE0DE8BB902E", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:wago:750-8216\\/040-000_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "FAC097A3-1733-4DBE-BD0F-DB48C7E27529", "versionEndExcluding": "fw22", "vulnerable": true }, { "criteria": "cpe:2.3:o:wago:750-8216\\/040-000_firmware:fw22:-:*:*:*:*:*:*", "matchCriteriaId": "9D23830F-CE66-41CF-83A9-52B61FC7829A", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:wago:750-8216\\/040-000:-:*:*:*:*:*:*:*", "matchCriteriaId": "A56C1204-6939-4353-A917-5B3542A889D3", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:wago:750-8217_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "08A03CC3-7F9F-4999-9B2F-CD715F0C5400", "versionEndExcluding": "fw22", "vulnerable": true }, { "criteria": "cpe:2.3:o:wago:750-8217_firmware:fw22:-:*:*:*:*:*:*", "matchCriteriaId": "D6C1B459-1A96-4F2E-A312-09EB11870821", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:wago:750-8217:-:*:*:*:*:*:*:*", "matchCriteriaId": "B23CD8FD-FC7A-4E24-BF8F-648478D82645", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:wago:750-8217\\/025-000_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "C2FDB71B-0965-4F15-891B-D68F1092DEB8", "versionEndExcluding": "fw22", "vulnerable": true }, { "criteria": "cpe:2.3:o:wago:750-8217\\/025-000_firmware:fw22:-:*:*:*:*:*:*", "matchCriteriaId": "083644B6-48A8-4416-8AB9-A793E0D4AE34", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:wago:750-8217\\/025-000:-:*:*:*:*:*:*:*", "matchCriteriaId": "6494874B-DB89-4C9C-BF6E-EB775D19C6B5", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:wago:750-8217\\/600-000_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "D3C0FD6B-5C2F-484D-95DD-002F79C3412D", "versionEndExcluding": "fw22", "vulnerable": true }, { "criteria": "cpe:2.3:o:wago:750-8217\\/600-000_firmware:fw22:-:*:*:*:*:*:*", "matchCriteriaId": "4C265A55-1C7C-40A0-AFD4-33335C978282", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:wago:750-8217\\/600-000:-:*:*:*:*:*:*:*", "matchCriteriaId": "D733746C-0F1D-49CB-BB1A-E8409E891389", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:wago:750-8217\\/625-000_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "9F9119CD-296C-4AFF-9DD9-6BD99CE09BE7", "versionEndExcluding": "fw22", "vulnerable": true }, { "criteria": "cpe:2.3:o:wago:750-8217\\/625-000_firmware:fw22:-:*:*:*:*:*:*", "matchCriteriaId": "5EA104B2-B823-4F0A-ACB2-AEF653928ACB", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:wago:750-8217\\/625-000:-:*:*:*:*:*:*:*", "matchCriteriaId": "4228ED9E-36C8-4F01-9447-D1D58C3BD6C5", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:wago:750-823_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "00E7270D-BA8B-482E-B15B-5F92F8646CB8", "versionEndExcluding": "fw11", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:wago:750-823:-:*:*:*:*:*:*:*", "matchCriteriaId": "CB88572A-CB05-4B52-8BFC-05EFDC819244", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:wago:750-829_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "14796840-D7CC-4F28-9804-8155B780C5C2", "versionEndExcluding": "fw17", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:wago:750-829:-:*:*:*:*:*:*:*", "matchCriteriaId": "F88F6E08-2D1B-4B34-B8DB-40292C0BBEB2", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:wago:750-831_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "2C7DB904-69F4-4588-9572-7E45D0DC0001", "versionEndExcluding": "fw17", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:wago:750-831:-:*:*:*:*:*:*:*", "matchCriteriaId": "F0631884-FF6F-4AA9-9D76-CDECB5A738FC", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:wago:750-831\\/000-002_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "6FF93A1D-6A78-4EC5-8FEA-58FEFC6EEDB0", "versionEndExcluding": "fw17", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:wago:750-831\\/000-002:-:*:*:*:*:*:*:*", "matchCriteriaId": "8CB5953A-51A5-4A60-A066-4280066B968B", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:wago:750-832_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "324FC413-AC5B-41A7-891A-F1A804F8C25E", "versionEndExcluding": "fw11", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:wago:750-832:-:*:*:*:*:*:*:*", "matchCriteriaId": "13D1FA8D-C8BA-4D1C-8372-DECD40177631", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:wago:750-832\\/000-002_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "291B13B5-3895-4F06-9CB9-C81BBE4961C2", "versionEndExcluding": "fw11", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:wago:750-832\\/000-002:-:*:*:*:*:*:*:*", "matchCriteriaId": "0F21D094-AE7C-4501-83F1-0884CB549F3A", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:wago:750-852_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "8303BFCA-85EA-45E3-BC60-4950EECFA480", "versionEndExcluding": "fw17", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:wago:750-852:-:*:*:*:*:*:*:*", "matchCriteriaId": "9D6739E1-EF0B-48EE-90FC-5708756FC362", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:wago:750-862_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "CE4410A1-EF14-47A1-91BB-30AD9340E38C", "versionEndExcluding": "fw11", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:wago:750-862:-:*:*:*:*:*:*:*", "matchCriteriaId": "FA04FBFB-9E1C-4618-9FDC-70675506D8D5", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:wago:750-880_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "D78A1283-111B-462E-A958-DB7212D7B04A", "versionEndExcluding": "fw17", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:wago:750-880:-:*:*:*:*:*:*:*", "matchCriteriaId": "CFEAC4D9-15CF-44B8-844D-C012AA4637A2", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:wago:750-880\\/025-000_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "83807E05-5C45-49BB-A712-8440EA9E6864", "versionEndExcluding": "fw17", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:wago:750-880\\/025-000:-:*:*:*:*:*:*:*", "matchCriteriaId": "B2F43C2B-AA5E-4C09-9459-05273061CCB0", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:wago:750-880\\/025-001_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "2168C616-BEA8-4FB9-AEA6-820E6537BEFA", "versionEndExcluding": "fw17", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:wago:750-880\\/025-001:-:*:*:*:*:*:*:*", "matchCriteriaId": "E5BF7980-8B31-45AF-869D-531801B98BFD", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:wago:750-880\\/025-002_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "D06CCB3D-82AB-4D3E-B2BC-A8B0DA56A1F9", "versionEndExcluding": "fw17", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:wago:750-880\\/025-002:-:*:*:*:*:*:*:*", "matchCriteriaId": "E1C30C82-1A6F-42F3-92CA-D1F0BD6DB628", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:wago:750-880\\/040-000_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "B49CCB0C-FAD4-439D-94D9-2AB49DFA6F59", "versionEndExcluding": "fw17", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:wago:750-880\\/040-000:-:*:*:*:*:*:*:*", "matchCriteriaId": "FC027AEF-12BD-45CF-969B-9336F57E104E", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:wago:750-881_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "B8DC4322-1B14-4337-B611-23B9F8938D21", "versionEndExcluding": "fw17", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:wago:750-881:-:*:*:*:*:*:*:*", "matchCriteriaId": "6FE51647-62C1-4D3C-91FA-13ACA6CD71D2", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:wago:750-882_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "C167AB43-9D9C-44F4-A3C3-892562830DB7", "versionEndExcluding": "fw17", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:wago:750-882:-:*:*:*:*:*:*:*", "matchCriteriaId": "B1379D65-F376-4618-B708-5E59D64C8033", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:wago:750-885_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "48B9BDDC-063F-493D-AC1E-180F04086699", "versionEndExcluding": "fw17", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:wago:750-885:-:*:*:*:*:*:*:*", "matchCriteriaId": "7712F56E-AEBA-4DE0-9172-26F3D29B369B", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:wago:750-885\\/025-000_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "051FDB96-489B-4CE3-96D0-0A829520B90E", "versionEndExcluding": "fw17", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:wago:750-885\\/025-000:-:*:*:*:*:*:*:*", "matchCriteriaId": "F5C8BE76-DE3D-41D0-9430-FB40AF02B1E2", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:wago:750-889_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "C91305B6-0AD5-447C-9E8B-905D9065F938", "versionEndExcluding": "fw17", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:wago:750-889:-:*:*:*:*:*:*:*", "matchCriteriaId": "57919AAB-2962-4543-810A-C143300351F8", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:wago:750-890_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "A7519056-04A3-4E7A-AF71-BF459E0E6141", "versionEndExcluding": "fw11", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:wago:750-890:-:*:*:*:*:*:*:*", "matchCriteriaId": "11751A8B-FCFD-433B-9065-B4FC85168A93", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:wago:750-890\\/025-000_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "F67429CE-3C16-4EB8-8373-F963947FCB17", "versionEndExcluding": "fw11", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:wago:750-890\\/025-000:-:*:*:*:*:*:*:*", "matchCriteriaId": "DA0B4137-C73C-47D0-8489-CA0EF41ED9A9", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:wago:750-890\\/025-001_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "D88C6F15-0379-47C4-ADB4-9CB7661AD044", "versionEndExcluding": "fw11", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:wago:750-890\\/025-001:-:*:*:*:*:*:*:*", "matchCriteriaId": "BC2C91AA-9BD8-4856-B9AB-8E6CEAF8C8EC", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:wago:750-890\\/025-002_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "B2C70D5A-7780-40B4-B3A9-79964324E32C", "versionEndExcluding": "fw11", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:wago:750-890\\/025-002:-:*:*:*:*:*:*:*", "matchCriteriaId": "21EB6B55-D27F-4939-832A-A391F6A3E89A", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:wago:750-890\\/040-000_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "26E6806C-0EEF-4772-A64D-1C2124518991", "versionEndExcluding": "fw11", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:wago:750-890\\/040-000:-:*:*:*:*:*:*:*", "matchCriteriaId": "7862FE67-A0D9-4E4D-B7BD-EB70CF0260A7", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:wago:750-891_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "5778A709-DBFB-450A-B333-A58F69461A00", "versionEndExcluding": "fw11", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:wago:750-891:-:*:*:*:*:*:*:*", "matchCriteriaId": "22BAABD9-A10D-4904-AA02-C37C4490B47A", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:wago:750-893_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "94C15A80-4AB7-46A8-8ADC-A57A07F4CFA4", "versionEndExcluding": "fw11", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:wago:750-893:-:*:*:*:*:*:*:*", "matchCriteriaId": "4D4795D0-B90B-4643-8713-88D89172D1A5", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" } ], "cveTags": [], "descriptions": [ { "lang": "en", "value": "Multiple WAGO devices in multiple versions may allow an authenticated remote attacker with high privileges to DoS the device by sending a specifically crafted packet to the CODESYS V2 runtime." } ], "id": "CVE-2023-1620", "lastModified": "2024-11-21T07:39:33.570", "metrics": { "cvssMetricV31": [ { "cvssData": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 4.9, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "HIGH", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H", "version": "3.1" }, "exploitabilityScore": 1.2, "impactScore": 3.6, "source": "info@cert.vde.com", "type": "Secondary" }, { "cvssData": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 4.9, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "HIGH", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H", "version": "3.1" }, "exploitabilityScore": 1.2, "impactScore": 3.6, "source": "nvd@nist.gov", "type": "Primary" } ] }, "published": "2023-06-26T07:15:09.197", "references": [ { "source": "info@cert.vde.com", "tags": [ "Mitigation", "Third Party Advisory" ], "url": "https://cert.vde.com/en/advisories/VDE-2023-006/" }, { "source": "af854a3a-2127-422b-91ae-364da2661108", "tags": [ "Mitigation", "Third Party Advisory" ], "url": "https://cert.vde.com/en/advisories/VDE-2023-006/" } ], "sourceIdentifier": "info@cert.vde.com", "vulnStatus": "Modified", "weaknesses": [ { "description": [ { "lang": "en", "value": "CWE-1288" } ], "source": "info@cert.vde.com", "type": "Primary" } ] }
Vulnerability from fkie_nvd
Published
2021-08-31 11:15
Modified
2024-11-21 06:10
Severity ?
7.5 (High) - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
7.5 (High) - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
7.5 (High) - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Summary
Missing Release of Resource after Effective Lifetime vulnerability in OpenSSL implementation of WAGO 750-831/xxx-xxx, 750-880/xxx-xxx, 750-881, 750-889 in versions FW4 up to FW15 allows an unauthenticated attacker to cause DoS on the device.
References
▼ | URL | Tags | |
---|---|---|---|
info@cert.vde.com | https://cert.vde.com/en-us/advisories/vde-2021-038 | Third Party Advisory | |
af854a3a-2127-422b-91ae-364da2661108 | https://cert.vde.com/en-us/advisories/vde-2021-038 | Third Party Advisory |
Impacted products
Vendor | Product | Version | |
---|---|---|---|
wago | 750-880\/040-000_firmware | * | |
wago | 750-880\/040-000 | - | |
wago | 750-880\/025-002_firmware | * | |
wago | 750-880\/025-002 | - | |
wago | 750-880\/025-001_firmware | * | |
wago | 750-880\/025-001 | - | |
wago | 750-880\/025-000_firmware | * | |
wago | 750-880\/025-000 | - | |
wago | 750-831\/000-002_firmware | * | |
wago | 750-831\/000-002 | - | |
wago | 750-889_firmware | * | |
wago | 750-889 | - | |
wago | 750-881_firmware | * | |
wago | 750-881 | - | |
wago | 750-831_firmware | * | |
wago | 750-831 | - | |
wago | 750-880_firmware | * | |
wago | 750-880 | - |
{ "configurations": [ { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:wago:750-880\\/040-000_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "64E837A4-57BE-40EB-8A56-B0BB206FE18F", "versionEndIncluding": "fw15", "versionStartIncluding": "fw4", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:wago:750-880\\/040-000:-:*:*:*:*:*:*:*", "matchCriteriaId": "FC027AEF-12BD-45CF-969B-9336F57E104E", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:wago:750-880\\/025-002_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "919AC39F-D02D-49C0-90D6-F5230C61A7D6", "versionEndIncluding": "fw15", "versionStartIncluding": "fw4", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:wago:750-880\\/025-002:-:*:*:*:*:*:*:*", "matchCriteriaId": "E1C30C82-1A6F-42F3-92CA-D1F0BD6DB628", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:wago:750-880\\/025-001_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "79B295FB-FFCF-459B-9486-3727471654B1", "versionEndIncluding": "fw15", "versionStartIncluding": "fw4", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:wago:750-880\\/025-001:-:*:*:*:*:*:*:*", "matchCriteriaId": "E5BF7980-8B31-45AF-869D-531801B98BFD", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:wago:750-880\\/025-000_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "00D72029-8484-452B-B1CD-D0524D531B10", "versionEndIncluding": "fw15", "versionStartIncluding": "fw4", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:wago:750-880\\/025-000:-:*:*:*:*:*:*:*", "matchCriteriaId": "B2F43C2B-AA5E-4C09-9459-05273061CCB0", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:wago:750-831\\/000-002_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "81AECA1A-207F-4286-B39C-E75F6E047AE8", "versionEndIncluding": "fw15", "versionStartIncluding": "fw4", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:wago:750-831\\/000-002:-:*:*:*:*:*:*:*", "matchCriteriaId": "8CB5953A-51A5-4A60-A066-4280066B968B", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:wago:750-889_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "EEA48F1D-170A-48A4-B599-548209CA005E", "versionEndIncluding": "fw15", "versionStartIncluding": "fw4", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:wago:750-889:-:*:*:*:*:*:*:*", "matchCriteriaId": "57919AAB-2962-4543-810A-C143300351F8", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:wago:750-881_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "66314186-5478-4DFD-B08D-6FC2B85A6986", "versionEndIncluding": "fw15", "versionStartIncluding": "fw4", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:wago:750-881:-:*:*:*:*:*:*:*", "matchCriteriaId": "6FE51647-62C1-4D3C-91FA-13ACA6CD71D2", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:wago:750-831_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "2AE56B51-58E5-4C2F-9DD8-21DC72274C0E", "versionEndIncluding": "fw15", "versionStartIncluding": "fw4", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:wago:750-831:-:*:*:*:*:*:*:*", "matchCriteriaId": "F0631884-FF6F-4AA9-9D76-CDECB5A738FC", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:wago:750-880_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "FD8DD66C-05AA-4E92-9B0C-A2732DAB3A21", "versionEndIncluding": "fw15", "versionStartIncluding": "fw4", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:wago:750-880:-:*:*:*:*:*:*:*", "matchCriteriaId": "CFEAC4D9-15CF-44B8-844D-C012AA4637A2", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" } ], "cveTags": [], "descriptions": [ { "lang": "en", "value": "Missing Release of Resource after Effective Lifetime vulnerability in OpenSSL implementation of WAGO 750-831/xxx-xxx, 750-880/xxx-xxx, 750-881, 750-889 in versions FW4 up to FW15 allows an unauthenticated attacker to cause DoS on the device." }, { "lang": "es", "value": "Una vulnerabilidad de Falta de Liberaci\u00f3n de Recursos despu\u00e9s del Tiempo de Vida Efectivo en la implementaci\u00f3n de OpenSSL de WAGO 750-831/xxx-xxx, 750-880/xxx-xxx, 750-881, 750-889 en versiones FW4 hasta FW15, permite a un atacante no autenticado causar DoS en el dispositivo" } ], "id": "CVE-2021-34581", "lastModified": "2024-11-21T06:10:44.833", "metrics": { "cvssMetricV2": [ { "acInsufInfo": false, "baseSeverity": "HIGH", "cvssData": { "accessComplexity": "LOW", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "COMPLETE", "baseScore": 7.8, "confidentialityImpact": "NONE", "integrityImpact": "NONE", "vectorString": "AV:N/AC:L/Au:N/C:N/I:N/A:C", "version": "2.0" }, "exploitabilityScore": 10.0, "impactScore": 6.9, "obtainAllPrivilege": false, "obtainOtherPrivilege": false, "obtainUserPrivilege": false, "source": "nvd@nist.gov", "type": "Primary", "userInteractionRequired": false } ], "cvssMetricV31": [ { "cvssData": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 7.5, "baseSeverity": "HIGH", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "version": "3.1" }, "exploitabilityScore": 3.9, "impactScore": 3.6, "source": "info@cert.vde.com", "type": "Secondary" }, { "cvssData": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 7.5, "baseSeverity": "HIGH", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "version": "3.1" }, "exploitabilityScore": 3.9, "impactScore": 3.6, "source": "nvd@nist.gov", "type": "Primary" } ] }, "published": "2021-08-31T11:15:07.830", "references": [ { "source": "info@cert.vde.com", "tags": [ "Third Party Advisory" ], "url": "https://cert.vde.com/en-us/advisories/vde-2021-038" }, { "source": "af854a3a-2127-422b-91ae-364da2661108", "tags": [ "Third Party Advisory" ], "url": "https://cert.vde.com/en-us/advisories/vde-2021-038" } ], "sourceIdentifier": "info@cert.vde.com", "vulnStatus": "Modified", "weaknesses": [ { "description": [ { "lang": "en", "value": "CWE-772" } ], "source": "info@cert.vde.com", "type": "Secondary" }, { "description": [ { "lang": "en", "value": "CWE-772" } ], "source": "nvd@nist.gov", "type": "Primary" } ] }
Vulnerability from fkie_nvd
Published
2020-12-10 03:15
Modified
2024-11-21 04:59
Severity ?
7.5 (High) - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
7.5 (High) - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
7.5 (High) - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Summary
Older firmware versions (FW1 up to FW10) of the WAGO PLC family 750-88x and 750-352 are vulnerable for a special denial of service attack.
References
▼ | URL | Tags | |
---|---|---|---|
info@cert.vde.com | https://cert.vde.com/en-us/advisories/vde-2020-042 | Patch, Third Party Advisory | |
info@cert.vde.com | https://us-cert.cisa.gov/ics/advisories/icsa-20-308-01 | Mitigation, Third Party Advisory, US Government Resource | |
af854a3a-2127-422b-91ae-364da2661108 | https://cert.vde.com/en-us/advisories/vde-2020-042 | Patch, Third Party Advisory | |
af854a3a-2127-422b-91ae-364da2661108 | https://us-cert.cisa.gov/ics/advisories/icsa-20-308-01 | Mitigation, Third Party Advisory, US Government Resource |
Impacted products
Vendor | Product | Version | |
---|---|---|---|
wago | 750-352_firmware | * | |
wago | 750-352 | - | |
wago | 750-831_firmware | * | |
wago | 750-831 | - | |
wago | 750-852_firmware | * | |
wago | 750-852 | - | |
wago | 750-880_firmware | * | |
wago | 750-880 | - | |
wago | 750-881_firmware | * | |
wago | 750-881 | - | |
wago | 750-889_firmware | * | |
wago | 750-889 | - | |
wago | 750-331_firmware | * | |
wago | 750-331 | - | |
wago | 750-829_firmware | * | |
wago | 750-829 | - | |
wago | 750-882_firmware | * | |
wago | 750-882 | - | |
wago | 750-885_firmware | * | |
wago | 750-885 | - |
{ "configurations": [ { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:wago:750-352_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "78ECDEAE-9136-4E34-AC21-7990A3AC2F3E", "versionEndIncluding": "fw10", "versionStartIncluding": "fw1", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:wago:750-352:-:*:*:*:*:*:*:*", "matchCriteriaId": "6C0865A4-6C89-4470-98E3-7E90BDF94D15", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:wago:750-831_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "83695276-2C24-4A4F-8CA8-ACEC00A4E026", "versionEndIncluding": "fw10", "versionStartIncluding": "fw1", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:wago:750-831:-:*:*:*:*:*:*:*", "matchCriteriaId": "F0631884-FF6F-4AA9-9D76-CDECB5A738FC", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:wago:750-852_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "18E0AB25-8F08-4D39-925F-36A39AB5EA45", "versionEndIncluding": "fw10", "versionStartIncluding": "fw1", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:wago:750-852:-:*:*:*:*:*:*:*", "matchCriteriaId": "9D6739E1-EF0B-48EE-90FC-5708756FC362", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:wago:750-880_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "C47C0719-1510-4D5B-93E3-755F063858B9", "versionEndIncluding": "fw10", "versionStartIncluding": "fw1", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:wago:750-880:-:*:*:*:*:*:*:*", "matchCriteriaId": "CFEAC4D9-15CF-44B8-844D-C012AA4637A2", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:wago:750-881_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "4CB680C1-A42D-4332-844E-9F1AB9E42A19", "versionEndIncluding": "fw10", "versionStartIncluding": "fw1", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:wago:750-881:-:*:*:*:*:*:*:*", "matchCriteriaId": "6FE51647-62C1-4D3C-91FA-13ACA6CD71D2", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:wago:750-889_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "2B40CC58-169A-42C7-AE12-53BF4A3434E3", "versionEndIncluding": "fw10", "versionStartIncluding": "fw1", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:wago:750-889:-:*:*:*:*:*:*:*", "matchCriteriaId": "57919AAB-2962-4543-810A-C143300351F8", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:wago:750-331_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "8523397F-F9DE-4525-BA22-EAEACF700E72", "versionEndIncluding": "fw10", "versionStartIncluding": "fw1", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:wago:750-331:-:*:*:*:*:*:*:*", "matchCriteriaId": "907712D2-72A3-46EB-9438-B35A2880E7BD", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:wago:750-829_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "6712FF6B-6117-4180-A0FA-8EE9276269C9", "versionEndIncluding": "fw10", "versionStartIncluding": "fw1", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:wago:750-829:-:*:*:*:*:*:*:*", "matchCriteriaId": "F88F6E08-2D1B-4B34-B8DB-40292C0BBEB2", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:wago:750-882_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "37F66F05-5B2A-49D2-B0D8-231E84B48A3A", "versionEndIncluding": "fw10", "versionStartIncluding": "fw1", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:wago:750-882:-:*:*:*:*:*:*:*", "matchCriteriaId": "B1379D65-F376-4618-B708-5E59D64C8033", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:wago:750-885_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "D07A46A0-27B3-45FA-BE7E-34495944E1AC", "versionEndIncluding": "fw10", "versionStartIncluding": "fw1", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:wago:750-885:-:*:*:*:*:*:*:*", "matchCriteriaId": "7712F56E-AEBA-4DE0-9172-26F3D29B369B", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" } ], "cveTags": [], "descriptions": [ { "lang": "en", "value": "Older firmware versions (FW1 up to FW10) of the WAGO PLC family 750-88x and 750-352 are vulnerable for a special denial of service attack." }, { "lang": "es", "value": "Las versiones de firmware m\u00e1s antiguas (FW1 hasta FW10) de la familia de PLC WAGO 750-88x y 750-352, son vulnerables a un ataque de denegaci\u00f3n de servicio especial." } ], "id": "CVE-2020-12516", "lastModified": "2024-11-21T04:59:50.853", "metrics": { "cvssMetricV2": [ { "acInsufInfo": false, "baseSeverity": "MEDIUM", "cvssData": { "accessComplexity": "LOW", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "PARTIAL", "baseScore": 5.0, "confidentialityImpact": "NONE", "integrityImpact": "NONE", "vectorString": "AV:N/AC:L/Au:N/C:N/I:N/A:P", "version": "2.0" }, "exploitabilityScore": 10.0, "impactScore": 2.9, "obtainAllPrivilege": false, "obtainOtherPrivilege": false, "obtainUserPrivilege": false, "source": "nvd@nist.gov", "type": "Primary", "userInteractionRequired": false } ], "cvssMetricV31": [ { "cvssData": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 7.5, "baseSeverity": "HIGH", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "version": "3.1" }, "exploitabilityScore": 3.9, "impactScore": 3.6, "source": "info@cert.vde.com", "type": "Secondary" }, { "cvssData": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 7.5, "baseSeverity": "HIGH", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "version": "3.1" }, "exploitabilityScore": 3.9, "impactScore": 3.6, "source": "nvd@nist.gov", "type": "Primary" } ] }, "published": "2020-12-10T03:15:11.593", "references": [ { "source": "info@cert.vde.com", "tags": [ "Patch", "Third Party Advisory" ], "url": "https://cert.vde.com/en-us/advisories/vde-2020-042" }, { "source": "info@cert.vde.com", "tags": [ "Mitigation", "Third Party Advisory", "US Government Resource" ], "url": "https://us-cert.cisa.gov/ics/advisories/icsa-20-308-01" }, { "source": "af854a3a-2127-422b-91ae-364da2661108", "tags": [ "Patch", "Third Party Advisory" ], "url": "https://cert.vde.com/en-us/advisories/vde-2020-042" }, { "source": "af854a3a-2127-422b-91ae-364da2661108", "tags": [ "Mitigation", "Third Party Advisory", "US Government Resource" ], "url": "https://us-cert.cisa.gov/ics/advisories/icsa-20-308-01" } ], "sourceIdentifier": "info@cert.vde.com", "vulnStatus": "Modified", "weaknesses": [ { "description": [ { "lang": "en", "value": "CWE-400" } ], "source": "info@cert.vde.com", "type": "Secondary" }, { "description": [ { "lang": "en", "value": "NVD-CWE-noinfo" } ], "source": "nvd@nist.gov", "type": "Primary" } ] }
Vulnerability from fkie_nvd
Published
2021-05-24 11:15
Modified
2024-11-21 05:47
Severity ?
9.1 (Critical) - CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H
6.5 (Medium) - CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
6.5 (Medium) - CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
Summary
On WAGO PFC200 devices in different firmware versions with special crafted packets an authorised attacker with network access to the device can access the file system with higher privileges.
References
▼ | URL | Tags | |
---|---|---|---|
info@cert.vde.com | https://cert.vde.com/en-us/advisories/vde-2021-014 | Third Party Advisory | |
af854a3a-2127-422b-91ae-364da2661108 | https://cert.vde.com/en-us/advisories/vde-2021-014 | Third Party Advisory |
Impacted products
{ "configurations": [ { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:wago:750-823_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "CCE00E32-0C93-47A2-9F61-7859F72ABAED", "versionEndIncluding": "fw07", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:wago:750-823:-:*:*:*:*:*:*:*", "matchCriteriaId": "CB88572A-CB05-4B52-8BFC-05EFDC819244", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:wago:750-829_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "D2D044CF-8637-4AE2-8163-938F206B8F76", "versionEndIncluding": "fw14", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:wago:750-829:-:*:*:*:*:*:*:*", "matchCriteriaId": "F88F6E08-2D1B-4B34-B8DB-40292C0BBEB2", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:wago:750-831_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "92234A0B-245B-4A5A-8346-25116F3D6290", "versionEndIncluding": "fw14", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:wago:750-831:-:*:*:*:*:*:*:*", "matchCriteriaId": "F0631884-FF6F-4AA9-9D76-CDECB5A738FC", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:wago:750-832_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "BF453C12-31A1-415B-BFAD-3354FE93C156", "versionEndIncluding": "fw06", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:wago:750-832:-:*:*:*:*:*:*:*", "matchCriteriaId": "13D1FA8D-C8BA-4D1C-8372-DECD40177631", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:wago:750-852_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "52B9F4C0-93D4-493A-8A45-F60DF4C00E72", "versionEndIncluding": "fw14", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:wago:750-852:-:*:*:*:*:*:*:*", "matchCriteriaId": "9D6739E1-EF0B-48EE-90FC-5708756FC362", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:wago:750-862_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "63A9D182-2CF5-4137-AACF-36B760B18A20", "versionEndIncluding": "fw07", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:wago:750-862:-:*:*:*:*:*:*:*", "matchCriteriaId": "FA04FBFB-9E1C-4618-9FDC-70675506D8D5", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:wago:750-880_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "84D457F2-6B9A-43B2-A443-53C131201411", "versionEndIncluding": "fw15", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:wago:750-880:-:*:*:*:*:*:*:*", "matchCriteriaId": "CFEAC4D9-15CF-44B8-844D-C012AA4637A2", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:wago:750-881_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "1370434F-903B-4328-B3B2-ACD80D50F607", "versionEndIncluding": "fw14", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:wago:750-881:-:*:*:*:*:*:*:*", "matchCriteriaId": "6FE51647-62C1-4D3C-91FA-13ACA6CD71D2", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:wago:750-882_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "5B797290-2B15-4822-9A47-098A97D02CEB", "versionEndIncluding": "fw14", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:wago:750-882:-:*:*:*:*:*:*:*", "matchCriteriaId": "B1379D65-F376-4618-B708-5E59D64C8033", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:wago:750-885_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "93B3081B-7010-4480-B298-6806AC93491C", "versionEndIncluding": "fw14", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:wago:750-885:-:*:*:*:*:*:*:*", "matchCriteriaId": "7712F56E-AEBA-4DE0-9172-26F3D29B369B", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:wago:750-889_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "D6505E3D-C983-48FF-AF17-99200EA464F4", "versionEndIncluding": "fw14", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:wago:750-889:-:*:*:*:*:*:*:*", "matchCriteriaId": "57919AAB-2962-4543-810A-C143300351F8", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:wago:750-890_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "2B30607F-D417-4EB7-B00B-3E4A00BDFDA8", "versionEndIncluding": "fw07", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:wago:750-890:-:*:*:*:*:*:*:*", "matchCriteriaId": "11751A8B-FCFD-433B-9065-B4FC85168A93", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:wago:750-891_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "6F3010D6-1319-4458-B4B1-C7470B3950F9", "versionEndIncluding": "fw07", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:wago:750-891:-:*:*:*:*:*:*:*", "matchCriteriaId": "22BAABD9-A10D-4904-AA02-C37C4490B47A", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:wago:750-893_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "5D636186-A586-4A4E-ACFC-5BCB2E4F7484", "versionEndIncluding": "fw07", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:wago:750-893:-:*:*:*:*:*:*:*", "matchCriteriaId": "4D4795D0-B90B-4643-8713-88D89172D1A5", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:wago:750-8202_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "03675DC5-0563-4742-90F1-85CCE629157E", "versionEndExcluding": "03.06.19_\\(18\\)", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:wago:750-8202:-:*:*:*:*:*:*:*", "matchCriteriaId": "23B02096-81A5-4823-94F3-D87F389397DE", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:wago:750-8203_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "E8178F4C-BD4B-4E22-95F9-5264FD29E557", "versionEndExcluding": "03.06.19_\\(18\\)", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:wago:750-8203:-:*:*:*:*:*:*:*", "matchCriteriaId": "EC428EC8-532A-4825-BCE3-C42A4BC01C68", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:wago:750-8204_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "9FC5F373-F17C-441A-AB86-F22D624E744E", "versionEndExcluding": "03.06.19_\\(18\\)", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:wago:750-8204:-:*:*:*:*:*:*:*", "matchCriteriaId": "7AF14BE1-1EB5-423B-9FE7-E401AEF92553", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:wago:750-8206_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "6C723A05-DC44-4F43-BEC2-EAD27E68804B", "versionEndExcluding": "03.06.19_\\(18\\)", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:wago:750-8206:-:*:*:*:*:*:*:*", "matchCriteriaId": "2E17ECC4-D7AE-485C-A2EF-4148817F9DB8", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:wago:750-8207_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "40789CA2-C91E-4510-A759-51C01A86C3F2", "versionEndExcluding": "03.06.19_\\(18\\)", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:wago:750-8207:-:*:*:*:*:*:*:*", "matchCriteriaId": "DA98A0D9-B050-430B-96C5-15932438FD3A", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:wago:750-8208_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "EDE72D10-8E25-4939-9255-23E8FED88449", "versionEndExcluding": "03.06.19_\\(18\\)", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:wago:750-8208:-:*:*:*:*:*:*:*", "matchCriteriaId": "C86098FC-E63E-4676-8BA1-ADCA30795558", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:wago:750-8210_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "6ED56607-5CA6-47F5-8C2A-AEF69CB4A9F7", "versionEndExcluding": "03.06.19_\\(18\\)", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:wago:750-8210:-:*:*:*:*:*:*:*", "matchCriteriaId": "1E11758B-46C3-4E57-943A-C9C073AE5211", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:wago:750-8211_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "D0E03C56-1319-4EE2-BF99-A4BA861D8381", "versionEndExcluding": "03.06.19_\\(18\\)", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:wago:750-8211:-:*:*:*:*:*:*:*", "matchCriteriaId": "5CD6B267-3E4B-4597-82A6-130D6F21C728", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:wago:750-8212_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "2343C5B1-4905-405B-ACD7-375C31FC6C9A", "versionEndExcluding": "03.06.19_\\(18\\)", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:wago:750-8212:-:*:*:*:*:*:*:*", "matchCriteriaId": "20BBC380-0F6E-4400-93AF-5B6CFEF00562", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:wago:750-8213_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "E486580C-8400-4235-A617-8DBF4F65F31D", "versionEndExcluding": "03.06.19_\\(18\\)", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:wago:750-8213:-:*:*:*:*:*:*:*", "matchCriteriaId": "4969E8EB-EF09-47B9-8F03-37BB87CFD048", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:wago:750-8214_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "3DE5D039-B7BA-4876-9B3B-B41CCA778A98", "versionEndExcluding": "03.06.19_\\(18\\)", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:wago:750-8214:-:*:*:*:*:*:*:*", "matchCriteriaId": "979A8E43-4285-4A7B-BB0B-E6888117862C", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:wago:750-8216_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "5F2AA067-9AA9-4D52-B609-C77CAD71CD33", "versionEndExcluding": "03.06.19_\\(18\\)", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:wago:750-8216:-:*:*:*:*:*:*:*", "matchCriteriaId": "3B854F74-173E-4523-BBA7-8FF7A9B9880E", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:wago:750-8217_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "A8032A39-1795-4AB0-9822-8A16EFFD1AE0", "versionEndExcluding": "03.06.19_\\(18\\)", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:wago:750-8217:-:*:*:*:*:*:*:*", "matchCriteriaId": "B23CD8FD-FC7A-4E24-BF8F-648478D82645", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" } ], "cveTags": [], "descriptions": [ { "lang": "en", "value": "On WAGO PFC200 devices in different firmware versions with special crafted packets an authorised attacker with network access to the device can access the file system with higher privileges." }, { "lang": "es", "value": "En los dispositivos WAGO PFC200 en diferentes versiones de firmware con paquetes especiales dise\u00f1ados, un atacante autorizado con acceso de red al dispositivo puede acceder al sistema de archivos con mayores privilegios" } ], "id": "CVE-2021-21001", "lastModified": "2024-11-21T05:47:22.780", "metrics": { "cvssMetricV2": [ { "acInsufInfo": false, "baseSeverity": "MEDIUM", "cvssData": { "accessComplexity": "LOW", "accessVector": "NETWORK", "authentication": "SINGLE", "availabilityImpact": "NONE", "baseScore": 4.0, "confidentialityImpact": "PARTIAL", "integrityImpact": "NONE", "vectorString": "AV:N/AC:L/Au:S/C:P/I:N/A:N", "version": "2.0" }, "exploitabilityScore": 8.0, "impactScore": 2.9, "obtainAllPrivilege": false, "obtainOtherPrivilege": false, "obtainUserPrivilege": false, "source": "nvd@nist.gov", "type": "Primary", "userInteractionRequired": false } ], "cvssMetricV31": [ { "cvssData": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 9.1, "baseSeverity": "CRITICAL", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "HIGH", "scope": "CHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H", "version": "3.1" }, "exploitabilityScore": 2.3, "impactScore": 6.0, "source": "info@cert.vde.com", "type": "Secondary" }, { "cvssData": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 6.5, "baseSeverity": "MEDIUM", "confidentialityImpact": "HIGH", "integrityImpact": "NONE", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N", "version": "3.1" }, "exploitabilityScore": 2.8, "impactScore": 3.6, "source": "nvd@nist.gov", "type": "Primary" } ] }, "published": "2021-05-24T11:15:07.980", "references": [ { "source": "info@cert.vde.com", "tags": [ "Third Party Advisory" ], "url": "https://cert.vde.com/en-us/advisories/vde-2021-014" }, { "source": "af854a3a-2127-422b-91ae-364da2661108", "tags": [ "Third Party Advisory" ], "url": "https://cert.vde.com/en-us/advisories/vde-2021-014" } ], "sourceIdentifier": "info@cert.vde.com", "vulnStatus": "Modified", "weaknesses": [ { "description": [ { "lang": "en", "value": "CWE-22" } ], "source": "info@cert.vde.com", "type": "Secondary" }, { "description": [ { "lang": "en", "value": "CWE-22" } ], "source": "nvd@nist.gov", "type": "Primary" } ] }
Vulnerability from fkie_nvd
Published
2023-06-26 07:15
Modified
2024-11-21 07:39
Severity ?
Summary
Multiple WAGO devices in multiple versions may allow an authenticated remote attacker with high privileges to DoS the device by sending a malformed packet.
References
▼ | URL | Tags | |
---|---|---|---|
info@cert.vde.com | https://cert.vde.com/en/advisories/VDE-2023-006/ | Mitigation, Third Party Advisory | |
af854a3a-2127-422b-91ae-364da2661108 | https://cert.vde.com/en/advisories/VDE-2023-006/ | Mitigation, Third Party Advisory |
Impacted products
{ "configurations": [ { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:wago:750-331_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "1F6E0849-BB68-41FD-8A8F-0D1C2706CAEC", "versionEndExcluding": "fw17", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:wago:750-331:-:*:*:*:*:*:*:*", "matchCriteriaId": "907712D2-72A3-46EB-9438-B35A2880E7BD", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:wago:750-8202_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "551C0E63-CF9E-444C-AE0C-100A97ECC9B1", "versionEndExcluding": "fw22", "vulnerable": true }, { "criteria": "cpe:2.3:o:wago:750-8202_firmware:fw22:-:*:*:*:*:*:*", "matchCriteriaId": "4284AF6B-DAA7-49FF-AA76-D7E7DFDFE07B", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:wago:750-8202:-:*:*:*:*:*:*:*", "matchCriteriaId": "23B02096-81A5-4823-94F3-D87F389397DE", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:wago:750-8202\\/000-011_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "47549C97-D522-4AD7-BD23-9D2F3C72132E", "versionEndExcluding": "fw22", "vulnerable": true }, { "criteria": "cpe:2.3:o:wago:750-8202\\/000-011_firmware:fw22:-:*:*:*:*:*:*", "matchCriteriaId": "397706F7-F98A-4121-9FBA-DD1535E6E404", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:wago:750-8202\\/000-011:-:*:*:*:*:*:*:*", "matchCriteriaId": "A4B47DFA-BEAB-45F1-A590-14F229E8DF04", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:wago:750-8202\\/000-012_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "8D714E6B-11E5-4B0F-82C1-23E5118C56D1", "versionEndExcluding": "fw22", "vulnerable": true }, { "criteria": "cpe:2.3:o:wago:750-8202\\/000-012_firmware:fw22:-:*:*:*:*:*:*", "matchCriteriaId": "F942D64E-3EB4-4D31-813D-0B59F79A7720", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:wago:750-8202\\/000-012:-:*:*:*:*:*:*:*", "matchCriteriaId": "B3D005CB-5D55-4142-8A5B-A005AC2FC239", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:wago:750-8202\\/000-022_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "C62B2C95-B80C-4078-A303-55055D915424", "versionEndExcluding": "fw22", "vulnerable": true }, { "criteria": "cpe:2.3:o:wago:750-8202\\/000-022_firmware:fw22:-:*:*:*:*:*:*", "matchCriteriaId": "96DA2FAA-022A-4B40-A465-C5F812B946E0", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:wago:750-8202\\/000-022:-:*:*:*:*:*:*:*", "matchCriteriaId": "38796792-5D69-41BA-84B8-792151B1FC6B", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:wago:750-8202\\/025-000_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "1101B5D8-D3AA-4942-A0CB-FD310F70C775", "versionEndExcluding": "fw22", "vulnerable": true }, { "criteria": "cpe:2.3:o:wago:750-8202\\/025-000_firmware:fw22:-:*:*:*:*:*:*", "matchCriteriaId": "FC3F904C-D7B5-44C9-A911-13820A1BC69B", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:wago:750-8202\\/025-000:-:*:*:*:*:*:*:*", "matchCriteriaId": "1FC647C3-A602-412F-A4DA-5ED092E2779C", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:wago:750-8202\\/025-001_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "89CF4D3F-91EE-4868-BD4B-2FDB6F8D9498", "versionEndExcluding": "fw22", "vulnerable": true }, { "criteria": "cpe:2.3:o:wago:750-8202\\/025-001_firmware:fw22:-:*:*:*:*:*:*", "matchCriteriaId": "3FEFA258-B6DA-4503-BE34-54554063D3B4", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:wago:750-8202\\/025-001:-:*:*:*:*:*:*:*", "matchCriteriaId": "F5B99800-C5E6-4001-BCBA-2DB5E3CF7D8D", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:wago:750-8202\\/025-002_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "8B800FD6-2D36-454F-80CF-AECED093BBDA", "versionEndExcluding": "fw22", "vulnerable": true }, { "criteria": "cpe:2.3:o:wago:750-8202\\/025-002_firmware:fw22:-:*:*:*:*:*:*", "matchCriteriaId": "6DAB7507-A773-4C8B-A1C8-DB1F861A3143", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:wago:750-8202\\/025-002:-:*:*:*:*:*:*:*", "matchCriteriaId": "DEF4C2B9-4C44-4F83-B0D5-220A1525D254", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:wago:750-8202\\/040-000_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "CAE570A8-B25C-433A-8046-BE71FC57BDCB", "versionEndExcluding": "fw22", "vulnerable": true }, { "criteria": "cpe:2.3:o:wago:750-8202\\/040-000_firmware:fw22:-:*:*:*:*:*:*", "matchCriteriaId": "48FC9087-237B-4F9F-BC53-01322015012B", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:wago:750-8202\\/040-000:-:*:*:*:*:*:*:*", "matchCriteriaId": "977A1B79-8D15-49D8-8C58-F7B1FFDF0E8D", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:wago:750-8202\\/040-001_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "F9805EF8-11F5-40BF-8F0E-616E0FD11B11", "versionEndExcluding": "fw22", "vulnerable": true }, { "criteria": "cpe:2.3:o:wago:750-8202\\/040-001_firmware:fw22:-:*:*:*:*:*:*", "matchCriteriaId": "159DAB8C-820E-4559-B56A-23E50FD30D24", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:wago:750-8202\\/040-001:-:*:*:*:*:*:*:*", "matchCriteriaId": "D4E35ACF-6C0A-4C9F-83A8-6CBAF927BE43", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:wago:750-8203_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "145EA515-9E1D-40AA-BA23-555356477CDD", "versionEndExcluding": "fw22", "vulnerable": true }, { "criteria": "cpe:2.3:o:wago:750-8203_firmware:fw22:-:*:*:*:*:*:*", "matchCriteriaId": "7852260B-66A5-494F-BE4E-6A01DE311F17", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:wago:750-8203:-:*:*:*:*:*:*:*", "matchCriteriaId": "EC428EC8-532A-4825-BCE3-C42A4BC01C68", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:wago:750-8203\\/025-000_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "59E9F43D-7933-4212-9518-7C6BF289ED12", "versionEndExcluding": "fw22", "vulnerable": true }, { "criteria": "cpe:2.3:o:wago:750-8203\\/025-000_firmware:fw22:-:*:*:*:*:*:*", "matchCriteriaId": "ED9A618C-BFEF-4A95-8E8C-FCB781900A83", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:wago:750-8203\\/025-000:-:*:*:*:*:*:*:*", "matchCriteriaId": "D2E35209-C3F2-4251-9CB5-094FA9B0D076", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:wago:750-8204_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "D1C9543F-3013-46F6-A7C0-618EE8EC6754", "versionEndExcluding": "fw22", "vulnerable": true }, { "criteria": "cpe:2.3:o:wago:750-8204_firmware:fw22:-:*:*:*:*:*:*", "matchCriteriaId": "60DFC0BC-2EA6-49C8-9AC6-4406C6CA0EE3", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:wago:750-8204:-:*:*:*:*:*:*:*", "matchCriteriaId": "7AF14BE1-1EB5-423B-9FE7-E401AEF92553", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:wago:750-8204\\/025-000_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "037047A8-7B3B-48A2-8B65-84C6C502D59C", "versionEndExcluding": "fw22", "vulnerable": true }, { "criteria": "cpe:2.3:o:wago:750-8204\\/025-000_firmware:fw22:-:*:*:*:*:*:*", "matchCriteriaId": "FAA7FFE7-69D8-44E2-A9DA-297B713AF666", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:wago:750-8204\\/025-000:-:*:*:*:*:*:*:*", "matchCriteriaId": "40B3E682-F1FD-4ADD-B1B8-89D7BA93B3FD", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:wago:750-8206_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "4CFE1CFA-E10A-4BBC-8A6A-6C08D4AC43D8", "versionEndExcluding": "fw22", "vulnerable": true }, { "criteria": "cpe:2.3:o:wago:750-8206_firmware:fw22:-:*:*:*:*:*:*", "matchCriteriaId": "13EEE4AE-0D12-4096-A0D1-8215A25FC2D6", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:wago:750-8206:-:*:*:*:*:*:*:*", "matchCriteriaId": "2E17ECC4-D7AE-485C-A2EF-4148817F9DB8", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:wago:750-8206\\/025-000_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "EC5AB00E-1770-46FC-A36D-36D883087AA0", "versionEndExcluding": "fw22", "vulnerable": true }, { "criteria": "cpe:2.3:o:wago:750-8206\\/025-000_firmware:fw22:-:*:*:*:*:*:*", "matchCriteriaId": "8D54BB0C-B81E-4C76-9047-49D8F50CFB98", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:wago:750-8206\\/025-000:-:*:*:*:*:*:*:*", "matchCriteriaId": "6196935C-97E0-40A2-AF06-03CB72E40B0E", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:wago:750-8206\\/025-001_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "B15148A7-84AA-4A3E-8848-D881A5398CC7", "versionEndExcluding": "fw22", "vulnerable": true }, { "criteria": "cpe:2.3:o:wago:750-8206\\/025-001_firmware:fw22:-:*:*:*:*:*:*", "matchCriteriaId": "78ABEF5A-B2DD-4702-8DA2-5944D7A40891", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:wago:750-8206\\/025-001:-:*:*:*:*:*:*:*", "matchCriteriaId": "1E2892D5-A691-48A9-ACC9-236A50E6A40E", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:wago:750-8206\\/040-000_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "0131DC36-2979-4B4D-B2D1-57C53C409FB3", "versionEndExcluding": "fw22", "vulnerable": true }, { "criteria": "cpe:2.3:o:wago:750-8206\\/040-000_firmware:fw22:-:*:*:*:*:*:*", "matchCriteriaId": "EEFF4CAF-9D93-483E-82B6-D3B6F591AFAC", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:wago:750-8206\\/040-000:-:*:*:*:*:*:*:*", "matchCriteriaId": "49A39AFE-BC17-4A09-ABCE-271C2BB9AA07", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:wago:750-8206\\/040-001_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "0CD59B67-49A3-4A01-A714-C5E0BE076242", "versionEndExcluding": "fw22", "vulnerable": true }, { "criteria": "cpe:2.3:o:wago:750-8206\\/040-001_firmware:fw22:-:*:*:*:*:*:*", "matchCriteriaId": "85A051E1-616B-4E3F-8F53-5B2A5AB1528F", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:wago:750-8206\\/040-001:-:*:*:*:*:*:*:*", "matchCriteriaId": "B851D224-DFC0-4D96-AE88-0B7AF75FBCD8", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:wago:750-8207_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "A003635E-1ED0-486A-BC9F-DA52B8A950D8", "versionEndExcluding": "fw22", "vulnerable": true }, { "criteria": "cpe:2.3:o:wago:750-8207_firmware:fw22:-:*:*:*:*:*:*", "matchCriteriaId": "B34A1422-48B2-4471-9DAF-AF9D3B71892C", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:wago:750-8207:-:*:*:*:*:*:*:*", "matchCriteriaId": "DA98A0D9-B050-430B-96C5-15932438FD3A", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:wago:750-8207\\/025-000_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "7399A811-0861-4A43-90A6-013CEB77081D", "versionEndExcluding": "fw22", "vulnerable": true }, { "criteria": "cpe:2.3:o:wago:750-8207\\/025-000_firmware:fw22:-:*:*:*:*:*:*", "matchCriteriaId": "2C03CCC8-6645-454E-A9D1-E7ABDCBE5CD6", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:wago:750-8207\\/025-000:-:*:*:*:*:*:*:*", "matchCriteriaId": "6F56DA20-D82B-48C7-B4AD-8534367E8D83", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:wago:750-8207\\/025-001_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "854DDAAE-F8E0-4A65-AF7C-314FFCAC25DC", "versionEndExcluding": "fw22", "vulnerable": true }, { "criteria": "cpe:2.3:o:wago:750-8207\\/025-001_firmware:fw22:-:*:*:*:*:*:*", "matchCriteriaId": "3254AF58-A730-4300-8981-F2228A0AAD29", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:wago:750-8207\\/025-001:-:*:*:*:*:*:*:*", "matchCriteriaId": "5C5C4BAD-7268-4367-A112-60E1A2EF6AF3", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:wago:750-8208_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "34480DD4-C1AA-4B62-A7B5-FB54D985E86E", "versionEndExcluding": "fw22", "vulnerable": true }, { "criteria": "cpe:2.3:o:wago:750-8208_firmware:fw22:-:*:*:*:*:*:*", "matchCriteriaId": "AC9A829B-22F4-4885-AF1D-00F683C559EA", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:wago:750-8208:-:*:*:*:*:*:*:*", "matchCriteriaId": "C86098FC-E63E-4676-8BA1-ADCA30795558", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:wago:750-8208\\/025-000_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "F8D92116-99B7-438D-B1EE-0F168C74F7A2", "versionEndExcluding": "fw22", "vulnerable": true }, { "criteria": "cpe:2.3:o:wago:750-8208\\/025-000_firmware:fw22:-:*:*:*:*:*:*", "matchCriteriaId": "45BB3361-53C4-4F90-964A-7665C5897CAD", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:wago:750-8208\\/025-000:-:*:*:*:*:*:*:*", "matchCriteriaId": "8FFE4FF4-4EE4-493F-A8CF-968215142EF4", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:wago:750-8208\\/025-001_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "6ADD951D-6F50-48A8-88EF-F607703CA25A", "versionEndExcluding": "fw22", "vulnerable": true }, { "criteria": "cpe:2.3:o:wago:750-8208\\/025-001_firmware:fw22:-:*:*:*:*:*:*", "matchCriteriaId": "16246BD0-7D69-44D5-BFF0-1F204BB44B22", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:wago:750-8208\\/025-001:-:*:*:*:*:*:*:*", "matchCriteriaId": "B32F6244-FB19-4629-BCAB-A544C031E4BA", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:wago:750-8210_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "5D02C139-E2A7-4213-A1EF-582220F614EC", "versionEndExcluding": "fw22", "vulnerable": true }, { "criteria": "cpe:2.3:o:wago:750-8210_firmware:fw22:-:*:*:*:*:*:*", "matchCriteriaId": "929C02C9-5772-4B2D-A665-CE748CF7A526", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:wago:750-8210:-:*:*:*:*:*:*:*", "matchCriteriaId": "1E11758B-46C3-4E57-943A-C9C073AE5211", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:wago:750-8210\\/025-000_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "46EC94CF-1060-4949-94B6-E34650419E3D", "versionEndExcluding": "fw22", "vulnerable": true }, { "criteria": "cpe:2.3:o:wago:750-8210\\/025-000_firmware:fw22:-:*:*:*:*:*:*", "matchCriteriaId": "53A03E53-F39D-4F12-A79A-D6DF8F8CD403", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:wago:750-8210\\/025-000:-:*:*:*:*:*:*:*", "matchCriteriaId": "CF7C8131-3BE2-4515-81F0-1C7644B622B3", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:wago:750-8210\\/040-000_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "4AED674D-16EC-4E8E-97BA-CB39B0019D60", "versionEndExcluding": "fw22", "vulnerable": true }, { "criteria": "cpe:2.3:o:wago:750-8210\\/040-000_firmware:fw22:-:*:*:*:*:*:*", "matchCriteriaId": "95E73EC7-08A5-420C-8E18-22FE18440EC7", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:wago:750-8210\\/040-000:-:*:*:*:*:*:*:*", "matchCriteriaId": "50421963-086D-4B34-BCDA-1EA971708B73", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:wago:750-8211_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "7A154FD7-45ED-4B3D-A445-E31FFC8C1C08", "versionEndExcluding": "fw22", "vulnerable": true }, { "criteria": "cpe:2.3:o:wago:750-8211_firmware:fw22:-:*:*:*:*:*:*", "matchCriteriaId": "690B3B52-9119-469F-9DFB-CF4D787BC540", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:wago:750-8211:-:*:*:*:*:*:*:*", "matchCriteriaId": "5CD6B267-3E4B-4597-82A6-130D6F21C728", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:wago:750-8211\\/040-000_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "E85C90EB-9603-4C3E-BEFC-B4C387214305", "versionEndExcluding": "fw22", "vulnerable": true }, { "criteria": "cpe:2.3:o:wago:750-8211\\/040-000_firmware:fw22:-:*:*:*:*:*:*", "matchCriteriaId": "C06578AE-D8EC-4EA5-A2EA-7EDA7F967186", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:wago:750-8211\\/040-000:-:*:*:*:*:*:*:*", "matchCriteriaId": "4921C3E3-0ED0-4ECB-B791-BE3AE48D6F92", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:wago:750-8211\\/040-001_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "482B61FF-6456-446D-88B6-ED5058995C43", "versionEndExcluding": "fw22", "vulnerable": true }, { "criteria": "cpe:2.3:o:wago:750-8211\\/040-001_firmware:fw22:-:*:*:*:*:*:*", "matchCriteriaId": "C228D9F9-D78B-428F-875E-D1E99C7D76BA", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:wago:750-8211\\/040-001:-:*:*:*:*:*:*:*", "matchCriteriaId": "C8E6D37B-E7CF-401E-86F0-0E17694CF3C3", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:wago:750-8212_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "5C88AE5A-9B49-4E0E-B0BB-EE904DB7DAFA", "versionEndExcluding": "fw22", "vulnerable": true }, { "criteria": "cpe:2.3:o:wago:750-8212_firmware:fw22:-:*:*:*:*:*:*", "matchCriteriaId": "CBE28488-099B-414B-8778-A1B6EBB3D609", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:wago:750-8212:-:*:*:*:*:*:*:*", "matchCriteriaId": "20BBC380-0F6E-4400-93AF-5B6CFEF00562", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:wago:750-8212\\/000-100_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "8C45DC9B-3AE4-4D63-ACD4-CA4EAA47F3D9", "versionEndExcluding": "fw22", "vulnerable": true }, { "criteria": "cpe:2.3:o:wago:750-8212\\/000-100_firmware:fw22:-:*:*:*:*:*:*", "matchCriteriaId": "F39F0363-0C7F-4ACC-A90E-4A751A3A5A5E", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:wago:750-8212\\/000-100:-:*:*:*:*:*:*:*", "matchCriteriaId": "5F356952-B865-49D8-889C-0A696E754C96", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:wago:750-8212\\/025-000_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "A996843E-1CA8-40ED-9A55-0EEC8FB60C4F", "versionEndExcluding": "fw22", "vulnerable": true }, { "criteria": "cpe:2.3:o:wago:750-8212\\/025-000_firmware:fw22:-:*:*:*:*:*:*", "matchCriteriaId": "CDB27987-1EA0-48EA-AFF1-BCC31D14752F", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:wago:750-8212\\/025-000:-:*:*:*:*:*:*:*", "matchCriteriaId": "31B9A7B1-2457-44E7-9753-DC5828281892", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:wago:750-8212\\/025-001_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "AB2D7529-BA14-41AF-992A-4472A0A205F8", "versionEndExcluding": "fw22", "vulnerable": true }, { "criteria": "cpe:2.3:o:wago:750-8212\\/025-001_firmware:fw22:-:*:*:*:*:*:*", "matchCriteriaId": "44E48D9C-56FB-4212-9A46-42CF64946DAD", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:wago:750-8212\\/025-001:-:*:*:*:*:*:*:*", "matchCriteriaId": "9EC1F538-875D-4337-A42E-A837173B30FF", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:wago:750-8212\\/025-002_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "718C1B8C-A4A1-4119-8060-1E2D6EE51FF8", "versionEndExcluding": "fw22", "vulnerable": true }, { "criteria": "cpe:2.3:o:wago:750-8212\\/025-002_firmware:fw22:-:*:*:*:*:*:*", "matchCriteriaId": "52F43D9D-D8DA-4AA5-992F-A5D4627D34C1", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:wago:750-8212\\/025-002:-:*:*:*:*:*:*:*", "matchCriteriaId": "A81CC3BB-60A3-451F-BC34-F1D03517B0E1", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:wago:750-8212\\/040-000_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "680FF2B0-B05A-4D5D-B101-1E6D593D6098", "versionEndExcluding": "fw22", "vulnerable": true }, { "criteria": "cpe:2.3:o:wago:750-8212\\/040-000_firmware:fw22:-:*:*:*:*:*:*", "matchCriteriaId": "CCE148ED-96A8-4ED3-A324-97CA995C5D8D", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:wago:750-8212\\/040-000:-:*:*:*:*:*:*:*", "matchCriteriaId": "26478046-3D53-45DB-B5B9-EE160383C9E2", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:wago:750-8212\\/040-001_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "CD2ECEBF-4B8B-4DC8-B770-4E383D87F1EE", "versionEndExcluding": "fw22", "vulnerable": true }, { "criteria": "cpe:2.3:o:wago:750-8212\\/040-001_firmware:fw22:-:*:*:*:*:*:*", "matchCriteriaId": "FF25820F-B641-4442-9886-61E81DD8B96D", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:wago:750-8212\\/040-001:-:*:*:*:*:*:*:*", "matchCriteriaId": "F94E5197-2913-488F-8E9C-AA14A4976726", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:wago:750-8212\\/040-010_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "321053FC-764E-4173-ACA6-E8EA9B87C578", "versionEndExcluding": "fw22", "vulnerable": true }, { "criteria": "cpe:2.3:o:wago:750-8212\\/040-010_firmware:fw22:-:*:*:*:*:*:*", "matchCriteriaId": "B700EE5E-EFEF-4F55-AD40-1DD6B4CE8924", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:wago:750-8212\\/040-010:-:*:*:*:*:*:*:*", "matchCriteriaId": "DF110184-7737-417A-8C9C-2F30FA8091C0", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:wago:750-8213_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "691C2432-2CAB-4E7F-917E-89CE7B030B03", "versionEndExcluding": "fw22", "vulnerable": true }, { "criteria": "cpe:2.3:o:wago:750-8213_firmware:fw22:-:*:*:*:*:*:*", "matchCriteriaId": "CBD60215-E245-4D59-BE3F-C775A815CBD9", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:wago:750-8213:-:*:*:*:*:*:*:*", "matchCriteriaId": "4969E8EB-EF09-47B9-8F03-37BB87CFD048", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:wago:750-8213\\/040-010_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "B60744FF-419F-42B4-8967-E110454B21A1", "versionEndExcluding": "fw22", "vulnerable": true }, { "criteria": "cpe:2.3:o:wago:750-8213\\/040-010_firmware:fw22:-:*:*:*:*:*:*", "matchCriteriaId": "4F8EBA7B-A9E0-4800-AB8E-9E2D4AE6947A", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:wago:750-8213\\/040-010:-:*:*:*:*:*:*:*", "matchCriteriaId": "764647F1-F01F-42CD-94B6-D46494BDC1A0", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:wago:750-8214_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "48797000-3235-4411-972F-0D1985F74010", "versionEndExcluding": "fw22", "vulnerable": true }, { "criteria": "cpe:2.3:o:wago:750-8214_firmware:fw22:-:*:*:*:*:*:*", "matchCriteriaId": "3DF9F583-33AD-43EF-904B-386AB358BC11", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:wago:750-8214:-:*:*:*:*:*:*:*", "matchCriteriaId": "979A8E43-4285-4A7B-BB0B-E6888117862C", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:wago:750-8215_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "051EDF25-11BE-450F-9277-B88470DBFF9B", "versionEndExcluding": "fw22", "vulnerable": true }, { "criteria": "cpe:2.3:o:wago:750-8215_firmware:fw22:-:*:*:*:*:*:*", "matchCriteriaId": "47B06BC7-C2DA-4154-90F3-1D623AC8B63E", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:wago:750-8215:-:*:*:*:*:*:*:*", "matchCriteriaId": "577EDC26-671C-4703-BBF0-FE93AFEA81E1", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:wago:750-8216_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "C17D1808-B2DF-4BA1-8B12-46F8C0A051F2", "versionEndExcluding": "fw22", "vulnerable": true }, { "criteria": "cpe:2.3:o:wago:750-8216_firmware:fw22:-:*:*:*:*:*:*", "matchCriteriaId": "D55A6726-A0FB-4A28-9C39-AA42715820C5", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:wago:750-8216:-:*:*:*:*:*:*:*", "matchCriteriaId": "3B854F74-173E-4523-BBA7-8FF7A9B9880E", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:wago:750-8216\\/025-000_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "6361C48B-DAF1-4AA7-B572-4B3D5CEB4BEF", "versionEndExcluding": "fw22", "vulnerable": true }, { "criteria": "cpe:2.3:o:wago:750-8216\\/025-000_firmware:fw22:-:*:*:*:*:*:*", "matchCriteriaId": "31650753-ECA0-45A9-8FEE-379FE198588A", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:wago:750-8216\\/025-000:-:*:*:*:*:*:*:*", "matchCriteriaId": "FAD81900-6337-4EB9-ABA5-836452AF3E59", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:wago:750-8216\\/025-001_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "6D85C0BB-B674-4756-A4E5-0916A288B7CE", "versionEndExcluding": "fw22", "vulnerable": true }, { "criteria": "cpe:2.3:o:wago:750-8216\\/025-001_firmware:fw22:-:*:*:*:*:*:*", "matchCriteriaId": "25D494F5-4FA3-4357-AD1B-42E0552EE318", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:wago:750-8216\\/025-001:-:*:*:*:*:*:*:*", "matchCriteriaId": "E3ED9EED-726C-4217-ABFE-CE0DE8BB902E", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:wago:750-8216\\/040-000_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "FAC097A3-1733-4DBE-BD0F-DB48C7E27529", "versionEndExcluding": "fw22", "vulnerable": true }, { "criteria": "cpe:2.3:o:wago:750-8216\\/040-000_firmware:fw22:-:*:*:*:*:*:*", "matchCriteriaId": "9D23830F-CE66-41CF-83A9-52B61FC7829A", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:wago:750-8216\\/040-000:-:*:*:*:*:*:*:*", "matchCriteriaId": "A56C1204-6939-4353-A917-5B3542A889D3", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:wago:750-8217_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "08A03CC3-7F9F-4999-9B2F-CD715F0C5400", "versionEndExcluding": "fw22", "vulnerable": true }, { "criteria": "cpe:2.3:o:wago:750-8217_firmware:fw22:-:*:*:*:*:*:*", "matchCriteriaId": "D6C1B459-1A96-4F2E-A312-09EB11870821", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:wago:750-8217:-:*:*:*:*:*:*:*", "matchCriteriaId": "B23CD8FD-FC7A-4E24-BF8F-648478D82645", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:wago:750-8217\\/025-000_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "C2FDB71B-0965-4F15-891B-D68F1092DEB8", "versionEndExcluding": "fw22", "vulnerable": true }, { "criteria": "cpe:2.3:o:wago:750-8217\\/025-000_firmware:fw22:-:*:*:*:*:*:*", "matchCriteriaId": "083644B6-48A8-4416-8AB9-A793E0D4AE34", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:wago:750-8217\\/025-000:-:*:*:*:*:*:*:*", "matchCriteriaId": "6494874B-DB89-4C9C-BF6E-EB775D19C6B5", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:wago:750-8217\\/600-000_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "D3C0FD6B-5C2F-484D-95DD-002F79C3412D", "versionEndExcluding": "fw22", "vulnerable": true }, { "criteria": "cpe:2.3:o:wago:750-8217\\/600-000_firmware:fw22:-:*:*:*:*:*:*", "matchCriteriaId": "4C265A55-1C7C-40A0-AFD4-33335C978282", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:wago:750-8217\\/600-000:-:*:*:*:*:*:*:*", "matchCriteriaId": "D733746C-0F1D-49CB-BB1A-E8409E891389", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:wago:750-8217\\/625-000_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "9F9119CD-296C-4AFF-9DD9-6BD99CE09BE7", "versionEndExcluding": "fw22", "vulnerable": true }, { "criteria": "cpe:2.3:o:wago:750-8217\\/625-000_firmware:fw22:-:*:*:*:*:*:*", "matchCriteriaId": "5EA104B2-B823-4F0A-ACB2-AEF653928ACB", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:wago:750-8217\\/625-000:-:*:*:*:*:*:*:*", "matchCriteriaId": "4228ED9E-36C8-4F01-9447-D1D58C3BD6C5", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:wago:750-823_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "00E7270D-BA8B-482E-B15B-5F92F8646CB8", "versionEndExcluding": "fw11", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:wago:750-823:-:*:*:*:*:*:*:*", "matchCriteriaId": "CB88572A-CB05-4B52-8BFC-05EFDC819244", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:wago:750-829_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "14796840-D7CC-4F28-9804-8155B780C5C2", "versionEndExcluding": "fw17", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:wago:750-829:-:*:*:*:*:*:*:*", "matchCriteriaId": "F88F6E08-2D1B-4B34-B8DB-40292C0BBEB2", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:wago:750-831_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "2C7DB904-69F4-4588-9572-7E45D0DC0001", "versionEndExcluding": "fw17", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:wago:750-831:-:*:*:*:*:*:*:*", "matchCriteriaId": "F0631884-FF6F-4AA9-9D76-CDECB5A738FC", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:wago:750-831\\/000-002_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "6FF93A1D-6A78-4EC5-8FEA-58FEFC6EEDB0", "versionEndExcluding": "fw17", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:wago:750-831\\/000-002:-:*:*:*:*:*:*:*", "matchCriteriaId": "8CB5953A-51A5-4A60-A066-4280066B968B", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:wago:750-832_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "324FC413-AC5B-41A7-891A-F1A804F8C25E", "versionEndExcluding": "fw11", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:wago:750-832:-:*:*:*:*:*:*:*", "matchCriteriaId": "13D1FA8D-C8BA-4D1C-8372-DECD40177631", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:wago:750-832\\/000-002_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "291B13B5-3895-4F06-9CB9-C81BBE4961C2", "versionEndExcluding": "fw11", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:wago:750-832\\/000-002:-:*:*:*:*:*:*:*", "matchCriteriaId": "0F21D094-AE7C-4501-83F1-0884CB549F3A", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:wago:750-852_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "8303BFCA-85EA-45E3-BC60-4950EECFA480", "versionEndExcluding": "fw17", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:wago:750-852:-:*:*:*:*:*:*:*", "matchCriteriaId": "9D6739E1-EF0B-48EE-90FC-5708756FC362", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:wago:750-862_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "CE4410A1-EF14-47A1-91BB-30AD9340E38C", "versionEndExcluding": "fw11", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:wago:750-862:-:*:*:*:*:*:*:*", "matchCriteriaId": "FA04FBFB-9E1C-4618-9FDC-70675506D8D5", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:wago:750-880_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "D78A1283-111B-462E-A958-DB7212D7B04A", "versionEndExcluding": "fw17", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:wago:750-880:-:*:*:*:*:*:*:*", "matchCriteriaId": "CFEAC4D9-15CF-44B8-844D-C012AA4637A2", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:wago:750-880\\/025-000_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "83807E05-5C45-49BB-A712-8440EA9E6864", "versionEndExcluding": "fw17", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:wago:750-880\\/025-000:-:*:*:*:*:*:*:*", "matchCriteriaId": "B2F43C2B-AA5E-4C09-9459-05273061CCB0", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:wago:750-880\\/025-001_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "2168C616-BEA8-4FB9-AEA6-820E6537BEFA", "versionEndExcluding": "fw17", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:wago:750-880\\/025-001:-:*:*:*:*:*:*:*", "matchCriteriaId": "E5BF7980-8B31-45AF-869D-531801B98BFD", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:wago:750-880\\/025-002_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "D06CCB3D-82AB-4D3E-B2BC-A8B0DA56A1F9", "versionEndExcluding": "fw17", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:wago:750-880\\/025-002:-:*:*:*:*:*:*:*", "matchCriteriaId": "E1C30C82-1A6F-42F3-92CA-D1F0BD6DB628", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:wago:750-880\\/040-000_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "B49CCB0C-FAD4-439D-94D9-2AB49DFA6F59", "versionEndExcluding": "fw17", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:wago:750-880\\/040-000:-:*:*:*:*:*:*:*", "matchCriteriaId": "FC027AEF-12BD-45CF-969B-9336F57E104E", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:wago:750-881_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "B8DC4322-1B14-4337-B611-23B9F8938D21", "versionEndExcluding": "fw17", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:wago:750-881:-:*:*:*:*:*:*:*", "matchCriteriaId": "6FE51647-62C1-4D3C-91FA-13ACA6CD71D2", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:wago:750-882_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "C167AB43-9D9C-44F4-A3C3-892562830DB7", "versionEndExcluding": "fw17", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:wago:750-882:-:*:*:*:*:*:*:*", "matchCriteriaId": "B1379D65-F376-4618-B708-5E59D64C8033", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:wago:750-885_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "48B9BDDC-063F-493D-AC1E-180F04086699", "versionEndExcluding": "fw17", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:wago:750-885:-:*:*:*:*:*:*:*", "matchCriteriaId": "7712F56E-AEBA-4DE0-9172-26F3D29B369B", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:wago:750-885\\/025-000_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "051FDB96-489B-4CE3-96D0-0A829520B90E", "versionEndExcluding": "fw17", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:wago:750-885\\/025-000:-:*:*:*:*:*:*:*", "matchCriteriaId": "F5C8BE76-DE3D-41D0-9430-FB40AF02B1E2", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:wago:750-889_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "C91305B6-0AD5-447C-9E8B-905D9065F938", "versionEndExcluding": "fw17", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:wago:750-889:-:*:*:*:*:*:*:*", "matchCriteriaId": "57919AAB-2962-4543-810A-C143300351F8", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:wago:750-890_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "A7519056-04A3-4E7A-AF71-BF459E0E6141", "versionEndExcluding": "fw11", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:wago:750-890:-:*:*:*:*:*:*:*", "matchCriteriaId": "11751A8B-FCFD-433B-9065-B4FC85168A93", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:wago:750-890\\/025-000_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "F67429CE-3C16-4EB8-8373-F963947FCB17", "versionEndExcluding": "fw11", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:wago:750-890\\/025-000:-:*:*:*:*:*:*:*", "matchCriteriaId": "DA0B4137-C73C-47D0-8489-CA0EF41ED9A9", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:wago:750-890\\/025-001_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "D88C6F15-0379-47C4-ADB4-9CB7661AD044", "versionEndExcluding": "fw11", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:wago:750-890\\/025-001:-:*:*:*:*:*:*:*", "matchCriteriaId": "BC2C91AA-9BD8-4856-B9AB-8E6CEAF8C8EC", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:wago:750-890\\/025-002_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "B2C70D5A-7780-40B4-B3A9-79964324E32C", "versionEndExcluding": "fw11", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:wago:750-890\\/025-002:-:*:*:*:*:*:*:*", "matchCriteriaId": "21EB6B55-D27F-4939-832A-A391F6A3E89A", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:wago:750-890\\/040-000_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "26E6806C-0EEF-4772-A64D-1C2124518991", "versionEndExcluding": "fw11", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:wago:750-890\\/040-000:-:*:*:*:*:*:*:*", "matchCriteriaId": "7862FE67-A0D9-4E4D-B7BD-EB70CF0260A7", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:wago:750-891_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "5778A709-DBFB-450A-B333-A58F69461A00", "versionEndExcluding": "fw11", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:wago:750-891:-:*:*:*:*:*:*:*", "matchCriteriaId": "22BAABD9-A10D-4904-AA02-C37C4490B47A", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:wago:750-893_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "94C15A80-4AB7-46A8-8ADC-A57A07F4CFA4", "versionEndExcluding": "fw11", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:wago:750-893:-:*:*:*:*:*:*:*", "matchCriteriaId": "4D4795D0-B90B-4643-8713-88D89172D1A5", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" } ], "cveTags": [], "descriptions": [ { "lang": "en", "value": "Multiple WAGO devices in multiple versions may allow an authenticated remote attacker with high privileges to DoS the device by sending a malformed packet." } ], "id": "CVE-2023-1619", "lastModified": "2024-11-21T07:39:33.333", "metrics": { "cvssMetricV31": [ { "cvssData": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 4.9, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "HIGH", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H", "version": "3.1" }, "exploitabilityScore": 1.2, "impactScore": 3.6, "source": "info@cert.vde.com", "type": "Primary" } ] }, "published": "2023-06-26T07:15:09.090", "references": [ { "source": "info@cert.vde.com", "tags": [ "Mitigation", "Third Party Advisory" ], "url": "https://cert.vde.com/en/advisories/VDE-2023-006/" }, { "source": "af854a3a-2127-422b-91ae-364da2661108", "tags": [ "Mitigation", "Third Party Advisory" ], "url": "https://cert.vde.com/en/advisories/VDE-2023-006/" } ], "sourceIdentifier": "info@cert.vde.com", "vulnStatus": "Modified", "weaknesses": [ { "description": [ { "lang": "en", "value": "CWE-1288" } ], "source": "info@cert.vde.com", "type": "Primary" } ] }
Vulnerability from fkie_nvd
Published
2021-05-24 11:15
Modified
2024-11-21 05:47
Severity ?
5.3 (Medium) - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
7.5 (High) - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
7.5 (High) - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Summary
On WAGO PFC200 devices in different firmware versions with special crafted packets an attacker with network access to the device could cause a denial of service for the login service of the runtime.
References
▼ | URL | Tags | |
---|---|---|---|
info@cert.vde.com | https://cert.vde.com/en-us/advisories/vde-2021-014 | Third Party Advisory | |
af854a3a-2127-422b-91ae-364da2661108 | https://cert.vde.com/en-us/advisories/vde-2021-014 | Third Party Advisory |
Impacted products
{ "configurations": [ { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:wago:750-823_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "CCE00E32-0C93-47A2-9F61-7859F72ABAED", "versionEndIncluding": "fw07", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:wago:750-823:-:*:*:*:*:*:*:*", "matchCriteriaId": "CB88572A-CB05-4B52-8BFC-05EFDC819244", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:wago:750-829_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "D2D044CF-8637-4AE2-8163-938F206B8F76", "versionEndIncluding": "fw14", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:wago:750-829:-:*:*:*:*:*:*:*", "matchCriteriaId": "F88F6E08-2D1B-4B34-B8DB-40292C0BBEB2", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:wago:750-831_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "92234A0B-245B-4A5A-8346-25116F3D6290", "versionEndIncluding": "fw14", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:wago:750-831:-:*:*:*:*:*:*:*", "matchCriteriaId": "F0631884-FF6F-4AA9-9D76-CDECB5A738FC", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:wago:750-832_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "BF453C12-31A1-415B-BFAD-3354FE93C156", "versionEndIncluding": "fw06", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:wago:750-832:-:*:*:*:*:*:*:*", "matchCriteriaId": "13D1FA8D-C8BA-4D1C-8372-DECD40177631", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:wago:750-852_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "52B9F4C0-93D4-493A-8A45-F60DF4C00E72", "versionEndIncluding": "fw14", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:wago:750-852:-:*:*:*:*:*:*:*", "matchCriteriaId": "9D6739E1-EF0B-48EE-90FC-5708756FC362", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:wago:750-862_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "63A9D182-2CF5-4137-AACF-36B760B18A20", "versionEndIncluding": "fw07", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:wago:750-862:-:*:*:*:*:*:*:*", "matchCriteriaId": "FA04FBFB-9E1C-4618-9FDC-70675506D8D5", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:wago:750-880_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "84D457F2-6B9A-43B2-A443-53C131201411", "versionEndIncluding": "fw15", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:wago:750-880:-:*:*:*:*:*:*:*", "matchCriteriaId": "CFEAC4D9-15CF-44B8-844D-C012AA4637A2", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:wago:750-881_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "1370434F-903B-4328-B3B2-ACD80D50F607", "versionEndIncluding": "fw14", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:wago:750-881:-:*:*:*:*:*:*:*", "matchCriteriaId": "6FE51647-62C1-4D3C-91FA-13ACA6CD71D2", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:wago:750-882_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "5B797290-2B15-4822-9A47-098A97D02CEB", "versionEndIncluding": "fw14", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:wago:750-882:-:*:*:*:*:*:*:*", "matchCriteriaId": "B1379D65-F376-4618-B708-5E59D64C8033", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:wago:750-885_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "93B3081B-7010-4480-B298-6806AC93491C", "versionEndIncluding": "fw14", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:wago:750-885:-:*:*:*:*:*:*:*", "matchCriteriaId": "7712F56E-AEBA-4DE0-9172-26F3D29B369B", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:wago:750-889_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "D6505E3D-C983-48FF-AF17-99200EA464F4", "versionEndIncluding": "fw14", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:wago:750-889:-:*:*:*:*:*:*:*", "matchCriteriaId": "57919AAB-2962-4543-810A-C143300351F8", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:wago:750-890_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "2B30607F-D417-4EB7-B00B-3E4A00BDFDA8", "versionEndIncluding": "fw07", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:wago:750-890:-:*:*:*:*:*:*:*", "matchCriteriaId": "11751A8B-FCFD-433B-9065-B4FC85168A93", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:wago:750-891_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "6F3010D6-1319-4458-B4B1-C7470B3950F9", "versionEndIncluding": "fw07", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:wago:750-891:-:*:*:*:*:*:*:*", "matchCriteriaId": "22BAABD9-A10D-4904-AA02-C37C4490B47A", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:wago:750-893_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "5D636186-A586-4A4E-ACFC-5BCB2E4F7484", "versionEndIncluding": "fw07", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:wago:750-893:-:*:*:*:*:*:*:*", "matchCriteriaId": "4D4795D0-B90B-4643-8713-88D89172D1A5", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:wago:750-8202_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "03675DC5-0563-4742-90F1-85CCE629157E", "versionEndExcluding": "03.06.19_\\(18\\)", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:wago:750-8202:-:*:*:*:*:*:*:*", "matchCriteriaId": "23B02096-81A5-4823-94F3-D87F389397DE", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:wago:750-8203_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "E8178F4C-BD4B-4E22-95F9-5264FD29E557", "versionEndExcluding": "03.06.19_\\(18\\)", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:wago:750-8203:-:*:*:*:*:*:*:*", "matchCriteriaId": "EC428EC8-532A-4825-BCE3-C42A4BC01C68", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:wago:750-8204_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "9FC5F373-F17C-441A-AB86-F22D624E744E", "versionEndExcluding": "03.06.19_\\(18\\)", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:wago:750-8204:-:*:*:*:*:*:*:*", "matchCriteriaId": "7AF14BE1-1EB5-423B-9FE7-E401AEF92553", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:wago:750-8206_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "6C723A05-DC44-4F43-BEC2-EAD27E68804B", "versionEndExcluding": "03.06.19_\\(18\\)", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:wago:750-8206:-:*:*:*:*:*:*:*", "matchCriteriaId": "2E17ECC4-D7AE-485C-A2EF-4148817F9DB8", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:wago:750-8207_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "40789CA2-C91E-4510-A759-51C01A86C3F2", "versionEndExcluding": "03.06.19_\\(18\\)", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:wago:750-8207:-:*:*:*:*:*:*:*", "matchCriteriaId": "DA98A0D9-B050-430B-96C5-15932438FD3A", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:wago:750-8208_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "EDE72D10-8E25-4939-9255-23E8FED88449", "versionEndExcluding": "03.06.19_\\(18\\)", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:wago:750-8208:-:*:*:*:*:*:*:*", "matchCriteriaId": "C86098FC-E63E-4676-8BA1-ADCA30795558", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:wago:750-8210_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "6ED56607-5CA6-47F5-8C2A-AEF69CB4A9F7", "versionEndExcluding": "03.06.19_\\(18\\)", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:wago:750-8210:-:*:*:*:*:*:*:*", "matchCriteriaId": "1E11758B-46C3-4E57-943A-C9C073AE5211", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:wago:750-8211_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "D0E03C56-1319-4EE2-BF99-A4BA861D8381", "versionEndExcluding": "03.06.19_\\(18\\)", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:wago:750-8211:-:*:*:*:*:*:*:*", "matchCriteriaId": "5CD6B267-3E4B-4597-82A6-130D6F21C728", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:wago:750-8212_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "2343C5B1-4905-405B-ACD7-375C31FC6C9A", "versionEndExcluding": "03.06.19_\\(18\\)", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:wago:750-8212:-:*:*:*:*:*:*:*", "matchCriteriaId": "20BBC380-0F6E-4400-93AF-5B6CFEF00562", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:wago:750-8213_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "E486580C-8400-4235-A617-8DBF4F65F31D", "versionEndExcluding": "03.06.19_\\(18\\)", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:wago:750-8213:-:*:*:*:*:*:*:*", "matchCriteriaId": "4969E8EB-EF09-47B9-8F03-37BB87CFD048", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:wago:750-8214_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "3DE5D039-B7BA-4876-9B3B-B41CCA778A98", "versionEndExcluding": "03.06.19_\\(18\\)", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:wago:750-8214:-:*:*:*:*:*:*:*", "matchCriteriaId": "979A8E43-4285-4A7B-BB0B-E6888117862C", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:wago:750-8216_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "5F2AA067-9AA9-4D52-B609-C77CAD71CD33", "versionEndExcluding": "03.06.19_\\(18\\)", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:wago:750-8216:-:*:*:*:*:*:*:*", "matchCriteriaId": "3B854F74-173E-4523-BBA7-8FF7A9B9880E", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:wago:750-8217_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "A8032A39-1795-4AB0-9822-8A16EFFD1AE0", "versionEndExcluding": "03.06.19_\\(18\\)", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:wago:750-8217:-:*:*:*:*:*:*:*", "matchCriteriaId": "B23CD8FD-FC7A-4E24-BF8F-648478D82645", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" } ], "cveTags": [], "descriptions": [ { "lang": "en", "value": "On WAGO PFC200 devices in different firmware versions with special crafted packets an attacker with network access to the device could cause a denial of service for the login service of the runtime." }, { "lang": "es", "value": "En dispositivos WAGO PFC200 en diferentes versiones de firmware con paquetes especiales dise\u00f1ados, un atacante con acceso de red al dispositivo podr\u00eda causar una denegaci\u00f3n de servicio para el servicio de inicio de sesi\u00f3n del tiempo de ejecuci\u00f3n" } ], "id": "CVE-2021-21000", "lastModified": "2024-11-21T05:47:22.593", "metrics": { "cvssMetricV2": [ { "acInsufInfo": false, "baseSeverity": "MEDIUM", "cvssData": { "accessComplexity": "LOW", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "PARTIAL", "baseScore": 5.0, "confidentialityImpact": "NONE", "integrityImpact": "NONE", "vectorString": "AV:N/AC:L/Au:N/C:N/I:N/A:P", "version": "2.0" }, "exploitabilityScore": 10.0, "impactScore": 2.9, "obtainAllPrivilege": false, "obtainOtherPrivilege": false, "obtainUserPrivilege": false, "source": "nvd@nist.gov", "type": "Primary", "userInteractionRequired": false } ], "cvssMetricV31": [ { "cvssData": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "LOW", "baseScore": 5.3, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L", "version": "3.1" }, "exploitabilityScore": 3.9, "impactScore": 1.4, "source": "info@cert.vde.com", "type": "Secondary" }, { "cvssData": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 7.5, "baseSeverity": "HIGH", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "version": "3.1" }, "exploitabilityScore": 3.9, "impactScore": 3.6, "source": "nvd@nist.gov", "type": "Primary" } ] }, "published": "2021-05-24T11:15:07.917", "references": [ { "source": "info@cert.vde.com", "tags": [ "Third Party Advisory" ], "url": "https://cert.vde.com/en-us/advisories/vde-2021-014" }, { "source": "af854a3a-2127-422b-91ae-364da2661108", "tags": [ "Third Party Advisory" ], "url": "https://cert.vde.com/en-us/advisories/vde-2021-014" } ], "sourceIdentifier": "info@cert.vde.com", "vulnStatus": "Modified", "weaknesses": [ { "description": [ { "lang": "en", "value": "CWE-770" } ], "source": "info@cert.vde.com", "type": "Secondary" }, { "description": [ { "lang": "en", "value": "CWE-770" } ], "source": "nvd@nist.gov", "type": "Primary" } ] }
Vulnerability from fkie_nvd
Published
2019-05-07 22:29
Modified
2024-11-21 04:19
Severity ?
Summary
The Web-GUI on WAGO Series 750-88x (750-330, 750-352, 750-829, 750-831, 750-852, 750-880, 750-881, 750-882, 750-884, 750-885, 750-889) and Series 750-87x (750-830, 750-849, 750-871, 750-872, 750-873) devices has undocumented service access.
References
Impacted products
Vendor | Product | Version | |
---|---|---|---|
wago | 750-830_firmware | * | |
wago | 750-830 | - | |
wago | 750-849_firmware | * | |
wago | 750-849 | - | |
wago | 750-871_firmware | * | |
wago | 750-871 | - | |
wago | 750-872_firmware | * | |
wago | 750-872 | - | |
wago | 750-873_firmware | * | |
wago | 750-873 | - | |
wago | 750-330_firmware | * | |
wago | 750-330 | - | |
wago | 750-352_firmware | * | |
wago | 750-352 | - | |
wago | 750-829_firmware | * | |
wago | 750-829 | - | |
wago | 750-831_firmware | * | |
wago | 750-831 | - | |
wago | 750-852_firmware | * | |
wago | 750-852 | - | |
wago | 750-880_firmware | * | |
wago | 750-880 | - | |
wago | 750-881_firmware | * | |
wago | 750-881 | - | |
wago | 750-882_firmware | * | |
wago | 750-882 | - | |
wago | 750-884_firmware | * | |
wago | 750-884 | - | |
wago | 750-885_firmware | * | |
wago | 750-885 | - | |
wago | 750-889_firmware | * | |
wago | 750-889 | - |
{ "configurations": [ { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:wago:750-830_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "0BBF6F1C-BE8B-446F-9F88-EE663E87A837", "versionEndExcluding": "06", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:wago:750-830:-:*:*:*:*:*:*:*", "matchCriteriaId": "535D9B38-A7F3-47A8-9107-30BCB67AA38A", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:wago:750-849_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "D001AA5F-B765-4B96-8FD4-1C2FF596609D", "versionEndExcluding": "08", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:wago:750-849:-:*:*:*:*:*:*:*", "matchCriteriaId": "408CF00F-D4F8-493C-B3F8-889E63E8EE9C", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:wago:750-871_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "076BEC2A-AA3E-4916-A5E1-304EAC6802FC", "versionEndExcluding": "11", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:wago:750-871:-:*:*:*:*:*:*:*", "matchCriteriaId": "0CF67808-FAD2-4504-91AB-3545AC650053", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:wago:750-872_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "34539AFB-A7AD-4684-9AEA-C9AC0CE3E06E", "versionEndExcluding": "07", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:wago:750-872:-:*:*:*:*:*:*:*", "matchCriteriaId": "1071B49C-C632-4E24-84AD-D7921970369A", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:wago:750-873_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "0284154D-CD73-42B2-9866-3145DBB5EDD9", "versionEndExcluding": "07", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:wago:750-873:-:*:*:*:*:*:*:*", "matchCriteriaId": "B5B31C89-B021-4390-B50F-9D4DE9E80C71", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:wago:750-330_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "A79C49B6-7004-44BB-A74E-9349A0CB692E", "versionEndExcluding": "14", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:wago:750-330:-:*:*:*:*:*:*:*", "matchCriteriaId": "D1E75CD3-9934-44E2-8B43-D7490741AA27", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:wago:750-352_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "8E001859-A338-43DA-877E-C43F57E7F9AD", "versionEndExcluding": "14", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:wago:750-352:-:*:*:*:*:*:*:*", "matchCriteriaId": "6C0865A4-6C89-4470-98E3-7E90BDF94D15", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:wago:750-829_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "AB2A6682-1879-4BA1-A253-2E0B386EC962", "versionEndExcluding": "14", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:wago:750-829:-:*:*:*:*:*:*:*", "matchCriteriaId": "F88F6E08-2D1B-4B34-B8DB-40292C0BBEB2", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:wago:750-831_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "3631065F-27D6-4217-84EA-A8B40CC1F38F", "versionEndExcluding": "14", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:wago:750-831:-:*:*:*:*:*:*:*", "matchCriteriaId": "F0631884-FF6F-4AA9-9D76-CDECB5A738FC", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:wago:750-852_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "1E940C38-F03A-4D81-9AEA-C3CAC90916E8", "versionEndExcluding": "14", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:wago:750-852:-:*:*:*:*:*:*:*", "matchCriteriaId": "9D6739E1-EF0B-48EE-90FC-5708756FC362", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:wago:750-880_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "A5974664-66D9-45BC-8977-98E3CE1D282F", "versionEndExcluding": "14", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:wago:750-880:-:*:*:*:*:*:*:*", "matchCriteriaId": "CFEAC4D9-15CF-44B8-844D-C012AA4637A2", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:wago:750-881_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "72B66D0B-53CF-4018-831A-5A67CBA51B14", "versionEndExcluding": "14", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:wago:750-881:-:*:*:*:*:*:*:*", "matchCriteriaId": "6FE51647-62C1-4D3C-91FA-13ACA6CD71D2", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:wago:750-882_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "7BC71AA4-B3F4-40AE-8BEF-C45FECF79359", "versionEndExcluding": "14", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:wago:750-882:-:*:*:*:*:*:*:*", "matchCriteriaId": "B1379D65-F376-4618-B708-5E59D64C8033", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:wago:750-884_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "B52C0C64-C91C-4B4C-80A7-CF19BC7CF15B", "versionEndExcluding": "14", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:wago:750-884:-:*:*:*:*:*:*:*", "matchCriteriaId": "13E1FF30-AA64-4EEB-8A7E-E6C118BB638E", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:wago:750-885_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "0C479541-01CF-4CA6-B35F-80D6DC756AFE", "versionEndExcluding": "14", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:wago:750-885:-:*:*:*:*:*:*:*", "matchCriteriaId": "7712F56E-AEBA-4DE0-9172-26F3D29B369B", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:wago:750-889_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "FF2B7B07-532C-4D7B-B168-A9C3700EE8DD", "versionEndExcluding": "14", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:wago:750-889:-:*:*:*:*:*:*:*", "matchCriteriaId": "57919AAB-2962-4543-810A-C143300351F8", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" } ], "cveTags": [], "descriptions": [ { "lang": "en", "value": "The Web-GUI on WAGO Series 750-88x (750-330, 750-352, 750-829, 750-831, 750-852, 750-880, 750-881, 750-882, 750-884, 750-885, 750-889) and Series 750-87x (750-830, 750-849, 750-871, 750-872, 750-873) devices has undocumented service access." }, { "lang": "es", "value": "Los dispositivos Web-GUI de las series 750-88x (750-330, 750-352, 750-829, 750-831, 750-852, 750-880, 750-881, 750-882, 750-884, 750-885, 750-889) y 750-87x (750-830, 750-849, 750-871, 750-872, 750-873) de WAGO disponen de acceso a servicios no documentados." } ], "id": "CVE-2019-10712", "lastModified": "2024-11-21T04:19:47.313", "metrics": { "cvssMetricV2": [ { "acInsufInfo": false, "baseSeverity": "HIGH", "cvssData": { "accessComplexity": "LOW", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "PARTIAL", "baseScore": 7.5, "confidentialityImpact": "PARTIAL", "integrityImpact": "PARTIAL", "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P", "version": "2.0" }, "exploitabilityScore": 10.0, "impactScore": 6.4, "obtainAllPrivilege": false, "obtainOtherPrivilege": false, "obtainUserPrivilege": false, "source": "nvd@nist.gov", "type": "Primary", "userInteractionRequired": false } ], "cvssMetricV30": [ { "cvssData": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 9.8, "baseSeverity": "CRITICAL", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "version": "3.0" }, "exploitabilityScore": 3.9, "impactScore": 5.9, "source": "nvd@nist.gov", "type": "Primary" } ] }, "published": "2019-05-07T22:29:00.207", "references": [ { "source": "cve@mitre.org", "url": "http://www.securityfocus.com/bid/108482" }, { "source": "cve@mitre.org", "tags": [ "Third Party Advisory" ], "url": "https://cert.vde.com/de-de/advisories/vde-2019-008" }, { "source": "cve@mitre.org", "url": "https://lists.apache.org/thread.html/r0066c1e862613de402fee04e81cbe00bcd64b64a2711beb9a13c3b25%40%3Ccommits.cassandra.apache.org%3E" }, { "source": "cve@mitre.org", "url": "https://lists.apache.org/thread.html/r25e25973e9577c62fd0221b4b52990851adf11cbe33036bd67d4b13d%40%3Ccommits.cassandra.apache.org%3E" }, { "source": "cve@mitre.org", "url": "https://lists.apache.org/thread.html/r37eb6579fa0bf94a72b6c978e2fee96f68a2b1b3ac1b1ce60aee86cf%40%3Ccommits.cassandra.apache.org%3E" }, { "source": "cve@mitre.org", "url": "https://lists.apache.org/thread.html/r386966780034aadee69ffd82d44555117c9339545b9ce990fe490a3e%40%3Ccommits.cassandra.apache.org%3E" }, { "source": "cve@mitre.org", "url": "https://lists.apache.org/thread.html/r80e8882c86c9c17a57396a5ef7c4f08878d629a0291243411be0de3a%40%3Ccommits.cassandra.apache.org%3E" }, { "source": "cve@mitre.org", "url": "https://lists.apache.org/thread.html/ra37700b842790883b9082e6b281fb7596f571b13078a4856cd38f2c2%40%3Ccommits.cassandra.apache.org%3E" }, { "source": "cve@mitre.org", "url": "https://lists.apache.org/thread.html/rb47911c179c9f3e8ea3f134b5645e63cd20c6fc63bd0b43ab5864bd1%40%3Ccommits.cassandra.apache.org%3E" }, { "source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://www.securityfocus.com/bid/108482" }, { "source": "af854a3a-2127-422b-91ae-364da2661108", "tags": [ "Third Party Advisory" ], "url": "https://cert.vde.com/de-de/advisories/vde-2019-008" }, { "source": "af854a3a-2127-422b-91ae-364da2661108", "url": "https://lists.apache.org/thread.html/r0066c1e862613de402fee04e81cbe00bcd64b64a2711beb9a13c3b25%40%3Ccommits.cassandra.apache.org%3E" }, { "source": "af854a3a-2127-422b-91ae-364da2661108", "url": "https://lists.apache.org/thread.html/r25e25973e9577c62fd0221b4b52990851adf11cbe33036bd67d4b13d%40%3Ccommits.cassandra.apache.org%3E" }, { "source": "af854a3a-2127-422b-91ae-364da2661108", "url": "https://lists.apache.org/thread.html/r37eb6579fa0bf94a72b6c978e2fee96f68a2b1b3ac1b1ce60aee86cf%40%3Ccommits.cassandra.apache.org%3E" }, { "source": "af854a3a-2127-422b-91ae-364da2661108", "url": "https://lists.apache.org/thread.html/r386966780034aadee69ffd82d44555117c9339545b9ce990fe490a3e%40%3Ccommits.cassandra.apache.org%3E" }, { "source": "af854a3a-2127-422b-91ae-364da2661108", "url": "https://lists.apache.org/thread.html/r80e8882c86c9c17a57396a5ef7c4f08878d629a0291243411be0de3a%40%3Ccommits.cassandra.apache.org%3E" }, { "source": "af854a3a-2127-422b-91ae-364da2661108", "url": "https://lists.apache.org/thread.html/ra37700b842790883b9082e6b281fb7596f571b13078a4856cd38f2c2%40%3Ccommits.cassandra.apache.org%3E" }, { "source": "af854a3a-2127-422b-91ae-364da2661108", "url": "https://lists.apache.org/thread.html/rb47911c179c9f3e8ea3f134b5645e63cd20c6fc63bd0b43ab5864bd1%40%3Ccommits.cassandra.apache.org%3E" } ], "sourceIdentifier": "cve@mitre.org", "vulnStatus": "Modified", "weaknesses": [ { "description": [ { "lang": "en", "value": "CWE-798" } ], "source": "nvd@nist.gov", "type": "Primary" } ] }
Vulnerability from fkie_nvd
Published
2018-04-03 13:29
Modified
2024-11-21 04:14
Severity ?
Summary
Wago 750 Series PLCs with firmware version 10 and prior include a remote attack may take advantage of an improper implementation of the 3 way handshake during a TCP connection affecting the communications with commission and service tools. Specially crafted packets may also be sent to Port 2455/TCP/IP, used in Codesys management software, which may result in a denial-of-service condition of communications with commissioning and service tools.
References
Impacted products
Vendor | Product | Version | |
---|---|---|---|
wago | 750-880_firmware | * | |
wago | 750-880 | - | |
wago | 750-881_firmware | * | |
wago | 750-881 | - | |
wago | 750-852_firmware | * | |
wago | 750-852 | - | |
wago | 750-882_firmware | * | |
wago | 750-882 | - | |
wago | 750-885_firmware | * | |
wago | 750-885 | - | |
wago | 750-831_firmware | * | |
wago | 750-831 | - | |
wago | 750-889_firmware | * | |
wago | 750-889 | - | |
wago | 750-829_firmware | * | |
wago | 750-829 | - |
{ "configurations": [ { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:wago:750-880_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "D443B788-5E7F-4B07-ADCE-7B4A5F3D2CE6", "versionEndIncluding": "10", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:wago:750-880:-:*:*:*:*:*:*:*", "matchCriteriaId": "CFEAC4D9-15CF-44B8-844D-C012AA4637A2", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:wago:750-881_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "015AA9DF-8769-4053-984B-BFD884A80699", "versionEndIncluding": "10", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:wago:750-881:-:*:*:*:*:*:*:*", "matchCriteriaId": "6FE51647-62C1-4D3C-91FA-13ACA6CD71D2", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:wago:750-852_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "4807A1D3-0154-4CA6-AAAC-DC4A0CCA2A96", "versionEndIncluding": "10", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:wago:750-852:-:*:*:*:*:*:*:*", "matchCriteriaId": "9D6739E1-EF0B-48EE-90FC-5708756FC362", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:wago:750-882_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "2FC244EF-D2FC-4C1C-AB48-690F5F48CBC8", "versionEndIncluding": "10", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:wago:750-882:-:*:*:*:*:*:*:*", "matchCriteriaId": "B1379D65-F376-4618-B708-5E59D64C8033", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:wago:750-885_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "51C795D3-6E76-4BDD-BE14-F81D2E2A90EC", "versionEndIncluding": "10", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:wago:750-885:-:*:*:*:*:*:*:*", "matchCriteriaId": "7712F56E-AEBA-4DE0-9172-26F3D29B369B", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:wago:750-831_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "D018BF5D-8BEA-4A4C-AA10-2CE7F11100BA", "versionEndIncluding": "10", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:wago:750-831:-:*:*:*:*:*:*:*", "matchCriteriaId": "F0631884-FF6F-4AA9-9D76-CDECB5A738FC", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:wago:750-889_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "442AF102-0892-4715-B23B-9343AC81F7C1", "versionEndIncluding": "10", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:wago:750-889:-:*:*:*:*:*:*:*", "matchCriteriaId": "57919AAB-2962-4543-810A-C143300351F8", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:wago:750-829_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "08EE2328-5393-41AF-B27B-2666854A4274", "versionEndIncluding": "10", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:wago:750-829:-:*:*:*:*:*:*:*", "matchCriteriaId": "F88F6E08-2D1B-4B34-B8DB-40292C0BBEB2", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" } ], "cveTags": [], "descriptions": [ { "lang": "en", "value": "Wago 750 Series PLCs with firmware version 10 and prior include a remote attack may take advantage of an improper implementation of the 3 way handshake during a TCP connection affecting the communications with commission and service tools. Specially crafted packets may also be sent to Port 2455/TCP/IP, used in Codesys management software, which may result in a denial-of-service condition of communications with commissioning and service tools." }, { "lang": "es", "value": "Los PLC Wago 750 Series, con versiones de firmware 10 y anteriores, incluyen un ataque remoto que podr\u00eda aprovecharse de una implementaci\u00f3n incorrecta de la negociaci\u00f3n a tres bandas durante una conexi\u00f3n TCP, lo que afecta a las comunicaciones con las herramientas de comisi\u00f3n y servicio. Los paquetes especialmente manipulados tambi\u00e9n podr\u00edan enviarse al puerto 2455/TCP/IP, empleado en el software de gesti\u00f3n Codesys, lo que podr\u00eda resultar en una condici\u00f3n de denegaci\u00f3n de servicio de las comunicaciones con las herramientas de comisi\u00f3n y servicio." } ], "id": "CVE-2018-8836", "lastModified": "2024-11-21T04:14:25.160", "metrics": { "cvssMetricV2": [ { "acInsufInfo": false, "baseSeverity": "MEDIUM", "cvssData": { "accessComplexity": "LOW", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "PARTIAL", "baseScore": 5.0, "confidentialityImpact": "NONE", "integrityImpact": "NONE", "vectorString": "AV:N/AC:L/Au:N/C:N/I:N/A:P", "version": "2.0" }, "exploitabilityScore": 10.0, "impactScore": 2.9, "obtainAllPrivilege": false, "obtainOtherPrivilege": false, "obtainUserPrivilege": false, "source": "nvd@nist.gov", "type": "Primary", "userInteractionRequired": false } ], "cvssMetricV30": [ { "cvssData": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "LOW", "baseScore": 5.3, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L", "version": "3.0" }, "exploitabilityScore": 3.9, "impactScore": 1.4, "source": "nvd@nist.gov", "type": "Primary" } ] }, "published": "2018-04-03T13:29:00.277", "references": [ { "source": "ics-cert@hq.dhs.gov", "tags": [ "Third Party Advisory", "VDB Entry" ], "url": "http://www.securityfocus.com/bid/103726" }, { "source": "ics-cert@hq.dhs.gov", "tags": [ "Third Party Advisory", "US Government Resource" ], "url": "https://ics-cert.us-cert.gov/advisories/ICSA-18-088-01" }, { "source": "ics-cert@hq.dhs.gov", "tags": [ "Vendor Advisory" ], "url": "https://www.wago.com/medias/Vulnerability-in-the-WAGO-Ethernet-TCP-IP-driver.pdf?context=bWFzdGVyfHJvb3R8MjgxNDk0fGFwcGxpY2F0aW9uL3BkZnxoOTcvaDhkLzkxNTAyMjMyMjA3NjYucGRmfGRlNWQ4ODc0NTE5M2UyNTUwNTIyNDRlOWFkNWI2YjNkMzg0YTVhYzlmYTBjNzM4MDdmNmYzOTM5M2ZlMGEzNzE" }, { "source": "af854a3a-2127-422b-91ae-364da2661108", "tags": [ "Third Party Advisory", "VDB Entry" ], "url": "http://www.securityfocus.com/bid/103726" }, { "source": "af854a3a-2127-422b-91ae-364da2661108", "tags": [ "Third Party Advisory", "US Government Resource" ], "url": "https://ics-cert.us-cert.gov/advisories/ICSA-18-088-01" }, { "source": "af854a3a-2127-422b-91ae-364da2661108", "tags": [ "Vendor Advisory" ], "url": "https://www.wago.com/medias/Vulnerability-in-the-WAGO-Ethernet-TCP-IP-driver.pdf?context=bWFzdGVyfHJvb3R8MjgxNDk0fGFwcGxpY2F0aW9uL3BkZnxoOTcvaDhkLzkxNTAyMjMyMjA3NjYucGRmfGRlNWQ4ODc0NTE5M2UyNTUwNTIyNDRlOWFkNWI2YjNkMzg0YTVhYzlmYTBjNzM4MDdmNmYzOTM5M2ZlMGEzNzE" } ], "sourceIdentifier": "ics-cert@hq.dhs.gov", "vulnStatus": "Modified", "weaknesses": [ { "description": [ { "lang": "en", "value": "CWE-404" } ], "source": "ics-cert@hq.dhs.gov", "type": "Secondary" }, { "description": [ { "lang": "en", "value": "CWE-404" } ], "source": "nvd@nist.gov", "type": "Primary" } ] }