CVE-2021-21000

Published: May 24, 2021Modified: Aug 15, 2025

7.5

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Exploitability: 3.9 / Impact: 3.6

Source: NVD

Description

On WAGO PFC200 devices in different firmware versions with special crafted packets an attacker with network access to the device could cause a denial of service for the login service of the runtime.

Affected (27)

Products: Wago: 750 823 Firmware, 750 829 Firmware, 750 831 Firmware, 750 832 Firmware, 750 852 Firmware, 750 862 Firmware, 750 880 Firmware, 750 881 Firmware, 750 882 Firmware, 750 885 Firmware, 750 889 Firmware, 750 890 Firmware, 750 891 Firmware, 750 893 Firmware, 750 8202 Firmware, 750 8203 Firmware, 750 8204 Firmware, 750 8206 Firmware, 750 8207 Firmware, 750 8208 Firmware, 750 8210 Firmware, 750 8211 Firmware, 750 8212 Firmware, 750 8213 Firmware, 750 8214 Firmware, 750 8216 Firmware, 750 8217 Firmware

27 products

Configuration A

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Wago 750 823 Firmware	Before fw08

Running on/with	Platform Versions
Wago 750 823	All versions

Configuration B

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Wago 750 829 Firmware	Before fw15

Running on/with	Platform Versions
Wago 750 829	All versions

Configuration C

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Wago 750 831 Firmware	Before fw15

Running on/with	Platform Versions
Wago 750 831	All versions

Configuration D

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Wago 750 832 Firmware	Before fw08

Running on/with	Platform Versions
Wago 750 832	All versions

Configuration E

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Wago 750 852 Firmware	Before fw15

Running on/with	Platform Versions
Wago 750 852	All versions

Configuration F

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Wago 750 862 Firmware	Before fw08

Running on/with	Platform Versions
Wago 750 862	All versions

Configuration G

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Wago 750 880 Firmware	Before fw16

Running on/with	Platform Versions
Wago 750 880	All versions

Configuration H

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Wago 750 881 Firmware	Before fw15

Running on/with	Platform Versions
Wago 750 881	All versions

Configuration I

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Wago 750 882 Firmware	Before fw15

Running on/with	Platform Versions
Wago 750 882	All versions

Configuration J

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Wago 750 885 Firmware	Before fw15

Running on/with	Platform Versions
Wago 750 885	All versions

Configuration K

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Wago 750 889 Firmware	Before fw15

Running on/with	Platform Versions
Wago 750 889	All versions

Configuration L

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Wago 750 890 Firmware	Before fw08

Running on/with	Platform Versions
Wago 750 890	All versions

Configuration M

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Wago 750 891 Firmware	Before fw08

Running on/with	Platform Versions
Wago 750 891	All versions

Configuration N

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Wago 750 893 Firmware	Before fw08

Running on/with	Platform Versions
Wago 750 893	All versions

Configuration O

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Wago 750 8202 Firmware	Before 03.06.19_\(18\)

Running on/with	Platform Versions
Wago 750 8202	All versions

Configuration P

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Wago 750 8203 Firmware	Before 03.06.19_\(18\)

Running on/with	Platform Versions
Wago 750 8203	All versions

Configuration Q

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Wago 750 8204 Firmware	Before 03.06.19_\(18\)

Running on/with	Platform Versions
Wago 750 8204	All versions

Configuration R

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Wago 750 8206 Firmware	Before 03.06.19_\(18\)

Running on/with	Platform Versions
Wago 750 8206	All versions

Configuration S

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Wago 750 8207 Firmware	Before 03.06.19_\(18\)

Running on/with	Platform Versions
Wago 750 8207	All versions

Configuration T

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Wago 750 8208 Firmware	Before 03.06.19_\(18\)

Running on/with	Platform Versions
Wago 750 8208	All versions

Configuration U

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Wago 750 8210 Firmware	Before 03.06.19_\(18\)

Running on/with	Platform Versions
Wago 750 8210	All versions

Configuration V

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Wago 750 8211 Firmware	Before 03.06.19_\(18\)

Running on/with	Platform Versions
Wago 750 8211	All versions

Configuration W

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Wago 750 8212 Firmware	Before 03.06.19_\(18\)

Running on/with	Platform Versions
Wago 750 8212	All versions

Configuration X

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Wago 750 8213 Firmware	Before 03.06.19_\(18\)

Running on/with	Platform Versions
Wago 750 8213	All versions

Configuration Y

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Wago 750 8214 Firmware	Before 03.06.19_\(18\)

Running on/with	Platform Versions
Wago 750 8214	All versions

Configuration Z

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Wago 750 8216 Firmware	Before 03.06.19_\(18\)

Running on/with	Platform Versions
Wago 750 8216	All versions

Configuration A

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Wago 750 8217 Firmware	Before 03.06.19_\(18\)

Running on/with	Platform Versions
Wago 750 8217	All versions

Related CWEs

CWE-770

Allocation of Resources Without Limits or Throttling

The product allocates a reusable resource or group of resources on behalf of an actor without imposing any restrictions on the size or number of resources that can be allocated, in violation of the intended security policy for that actor.

References (2)

https://cert.vde.com/en-us/advisories/vde-2021-014

Source: info@cert.vde.com

Third Party Advisory

https://cert.vde.com/en-us/advisories/vde-2021-014

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party Advisory

Timeline

No history available yet.