CVE-2021-30186

nvd nist

Published: May 25, 2021Modified: Jun 17, 2026

7.5

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Exploitability: 3.9 / Impact: 3.6

Source: NVD

Description

CODESYS V2 runtime system SP before 2.4.7.55 has a Heap-based Buffer Overflow.

Affected (29)

Products: Wago: 750 893 Firmware, 750 891 Firmware, 750 890 Firmware, 750 889 Firmware, 750 885 Firmware, 750 882 Firmware, 750 881 Firmware, 750 880 Firmware, 750 862 Firmware, 750 852 Firmware, 750 832 Firmware, 750 831 Firmware, 750 829 Firmware, 750 8202 Firmware, 750 8203 Firmware, 750 8204 Firmware, 750 8206 Firmware, 750 8207 Firmware, 750 8208 Firmware, 750 8210 Firmware, 750 8211 Firmware, 750 8212 Firmware, 750 8213 Firmware, 750 8214 Firmware, 750 8216 Firmware, 750 8217 Firmware, 750 823 Firmware · Codesys: Plcwinnt, Runtime Toolkit

27 products

2 products

Configuration A

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Wago 750 893 Firmware	Before fw08

Running on/with	Platform Versions
Wago 750 893	All versions

Configuration B

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Wago 750 891 Firmware	Before fw08

Running on/with	Platform Versions
Wago 750 891	All versions

Configuration C

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Wago 750 890 Firmware	Before fw08

Running on/with	Platform Versions
Wago 750 890	All versions

Configuration D

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Wago 750 889 Firmware	Before fw15

Running on/with	Platform Versions
Wago 750 889	All versions

Configuration E

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Wago 750 885 Firmware	Before fw15

Running on/with	Platform Versions
Wago 750 885	All versions

Configuration F

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Wago 750 882 Firmware	Before fw15

Running on/with	Platform Versions
Wago 750 882	All versions

Configuration G

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Wago 750 881 Firmware	Before fw15

Running on/with	Platform Versions
Wago 750 881	All versions

Configuration H

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Wago 750 880 Firmware	Before fw16

Running on/with	Platform Versions
Wago 750 880	All versions

Configuration I

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Wago 750 862 Firmware	Before fw08

Running on/with	Platform Versions
Wago 750 862	All versions

Configuration J

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Wago 750 852 Firmware	Before fw15

Running on/with	Platform Versions
Wago 750 852	All versions

Configuration K

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Wago 750 832 Firmware	Before fw08

Running on/with	Platform Versions
Wago 750 832	All versions

Configuration L

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Wago 750 831 Firmware	Before fw15

Running on/with	Platform Versions
Wago 750 831	All versions

Configuration M

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Wago 750 829 Firmware	Before fw15

Running on/with	Platform Versions
Wago 750 829	All versions

Configuration N

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Wago 750 8202 Firmware	Before 03.06.19_\(18\)

Running on/with	Platform Versions
Wago 750 8202	All versions

Configuration O

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Wago 750 8203 Firmware	Before 03.06.19_\(18\)

Running on/with	Platform Versions
Wago 750 8203	All versions

Configuration P

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Wago 750 8204 Firmware	Before 03.06.19_\(18\)

Running on/with	Platform Versions
Wago 750 8204	All versions

Configuration Q

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Wago 750 8206 Firmware	Before 03.06.19_\(18\)

Running on/with	Platform Versions
Wago 750 8206	All versions

Configuration R

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Wago 750 8207 Firmware	Before 03.06.19_\(18\)

Running on/with	Platform Versions
Wago 750 8207	All versions

Configuration S

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Wago 750 8208 Firmware	Before 03.06.19_\(18\)

Running on/with	Platform Versions
Wago 750 8208	All versions

Configuration T

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Wago 750 8210 Firmware	Before 03.06.19_\(18\)

Running on/with	Platform Versions
Wago 750 8210	All versions

Configuration U

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Wago 750 8211 Firmware	Before 03.06.19_\(18\)

Running on/with	Platform Versions
Wago 750 8211	All versions

Configuration V

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Wago 750 8212 Firmware	Before 03.06.19_\(18\)

Running on/with	Platform Versions
Wago 750 8212	All versions

Configuration W

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Wago 750 8213 Firmware	Before 03.06.19_\(18\)

Running on/with	Platform Versions
Wago 750 8213	All versions

Configuration X

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Wago 750 8214 Firmware	Before 03.06.19_\(18\)

Running on/with	Platform Versions
Wago 750 8214	All versions

Configuration Y

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Wago 750 8216 Firmware	Before 03.06.19_\(18\)

Running on/with	Platform Versions
Wago 750 8216	All versions

Configuration Z

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Wago 750 8217 Firmware	Before 03.06.19_\(18\)

Running on/with	Platform Versions
Wago 750 8217	All versions

Configuration A

2 vulnerable

Vulnerable Software	Affected Versions
Codesys Plcwinnt	Before 2.4.7.55
Codesys Runtime Toolkit	Before 2.4.7.55

Configuration B

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Wago 750 823 Firmware	Before fw08

Running on/with	Platform Versions
Wago 750 823	All versions

Related CWEs

CWE-787

Out-of-bounds Write

The product writes data past the end, or before the beginning, of the intended buffer.

References (4)

https://customers.codesys.com/index.php

Source: cve@mitre.org

Permissions RequiredVendor Advisory

https://customers.codesys.com/index.php?eID=dumpFile&t=f&f=14725&token=08691519ef764b252630759eff925890176ecd78&download=

Source: cve@mitre.org

Vendor Advisory

https://customers.codesys.com/index.php

Source: af854a3a-2127-422b-91ae-364da2661108

Permissions RequiredVendor Advisory

https://customers.codesys.com/index.php?eID=dumpFile&t=f&f=14725&token=08691519ef764b252630759eff925890176ecd78&download=

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

Timeline

No history available yet.