CVE-2021-34566

Published: Nov 9, 2022Modified: Jun 17, 2026

9.1

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H

Exploitability: 3.9 / Impact: 5.2

Source: info@cert.vde.com (Secondary)

Description

In WAGO I/O-Check Service in multiple products an unauthenticated remote attacker can send a specially crafted packet containing OS commands to crash the iocheck process and write memory resulting in loss of integrity and DoS.

Affected (196)

Wago

49 products

750 8100 Firmware

750 8101 Firmware

750 8101/025 000 Firmware

750 8102 Firmware

750 8102/025 000 Firmware

750 8202 Firmware

750 8202/000 011 Firmware

750 8202/000 012 Firmware

750 8202/000 022 Firmware

750 8202/025 000 Firmware

750 8202/025 001 Firmware

750 8202/025 002 Firmware

750 8202/040 000 Firmware

750 8202/040 001 Firmware

752 8303/8000 002 Firmware

762 4201/8000 001 Firmware

762 4202/8000 001 Firmware

762 4203/8000 001 Firmware

762 4204/8000 001 Firmware

762 4205/8000 001 Firmware

762 4205/8000 002 Firmware

762 4206/8000 001 Firmware

762 4206/8000 002 Firmware

762 4301/8000 002 Firmware

762 4302/8000 002 Firmware

762 4303/8000 002 Firmware

762 4304/8000 002 Firmware

762 4305/8000 002 Firmware

762 4306/8000 002 Firmware

762 5203/8000 001 Firmware

762 5204/8000 001 Firmware

762 5205/8000 001 Firmware

762 5206/8000 001 Firmware

762 5303/8000 002 Firmware

762 5304/8000 002 Firmware

762 5305/8000 002 Firmware

762 5306/8000 002 Firmware

762 6201/8000 001 Firmware

762 6202/8000 001 Firmware

762 6203/8000 001 Firmware

762 6204/8000 001 Firmware

762 6301/8000 002 Firmware

762 6302/8000 002 Firmware

762 6303/8000 002 Firmware

762 6304/8000 002 Firmware

Configuration A

4 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Wago 750 8100 Firmware	Before 18
Wago 750 8100 Firmware	Version 18
Wago 750 8100 Firmware	Version 18 patch_1
Wago 750 8100 Firmware	Version 18 patch_2

Running on/with	Platform Versions
Wago 750 8100	All versions

Configuration B

4 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Wago 750 8101 Firmware	Before 18
Wago 750 8101 Firmware	Version 18
Wago 750 8101 Firmware	Version 18 patch_1
Wago 750 8101 Firmware	Version 18 patch_2

Running on/with	Platform Versions
Wago 750 8101	All versions

Configuration C

4 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Wago 750 8101/025 000 Firmware	Before 18
Wago 750 8101/025 000 Firmware	Version 18
Wago 750 8101/025 000 Firmware	Version 18 patch_1
Wago 750 8101/025 000 Firmware	Version 18 patch_2

Running on/with	Platform Versions
Wago 750 8101/025 000	All versions

Configuration D

4 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Wago 750 8102 Firmware	Before 18
Wago 750 8102 Firmware	Version 18
Wago 750 8102 Firmware	Version 18 patch_1
Wago 750 8102 Firmware	Version 18 patch_2

Running on/with	Platform Versions
Wago 750 8102	All versions

Configuration E

4 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Wago 750 8102/025 000 Firmware	Before 18
Wago 750 8102/025 000 Firmware	Version 18
Wago 750 8102/025 000 Firmware	Version 18 patch_1
Wago 750 8102/025 000 Firmware	Version 18 patch_2

Running on/with	Platform Versions
Wago 750 8102/025 000	All versions

Configuration F

4 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Wago 750 8202 Firmware	Before 18
Wago 750 8202 Firmware	Version 18
Wago 750 8202 Firmware	Version 18 patch_1
Wago 750 8202 Firmware	Version 18 patch_2

Running on/with	Platform Versions
Wago 750 8202	All versions

Configuration G

4 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Wago 750 8202/000 011 Firmware	Before 18
Wago 750 8202/000 011 Firmware	Version 18
Wago 750 8202/000 011 Firmware	Version 18 patch_1
Wago 750 8202/000 011 Firmware	Version 18 patch_2

Running on/with	Platform Versions
Wago 750 8202/000 011	All versions

Configuration H

4 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Wago 750 8202/000 012 Firmware	Before 18
Wago 750 8202/000 012 Firmware	Version 18
Wago 750 8202/000 012 Firmware	Version 18 patch_1
Wago 750 8202/000 012 Firmware	Version 18 patch_2

Running on/with	Platform Versions
Wago 750 8202/000 012	All versions

Configuration I

4 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Wago 750 8202/000 022 Firmware	Before 18
Wago 750 8202/000 022 Firmware	Version 18
Wago 750 8202/000 022 Firmware	Version 18 patch_1
Wago 750 8202/000 022 Firmware	Version 18 patch_2

Running on/with	Platform Versions
Wago 750 8202/000 022	All versions

Configuration J

4 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Wago 750 8202/025 000 Firmware	Before 18
Wago 750 8202/025 000 Firmware	Version 18
Wago 750 8202/025 000 Firmware	Version 18 patch_1
Wago 750 8202/025 000 Firmware	Version 18 patch_2

Running on/with	Platform Versions
Wago 750 8202/025 000	All versions

Configuration K

4 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Wago 750 8202/025 001 Firmware	Before 18
Wago 750 8202/025 001 Firmware	Version 18
Wago 750 8202/025 001 Firmware	Version 18 patch_1
Wago 750 8202/025 001 Firmware	Version 18 patch_2

Running on/with	Platform Versions
Wago 750 8202/025 001	All versions

Configuration L

4 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Wago 750 8202/025 002 Firmware	Before 18
Wago 750 8202/025 002 Firmware	Version 18
Wago 750 8202/025 002 Firmware	Version 18 patch_1
Wago 750 8202/025 002 Firmware	Version 18 patch_2

Running on/with	Platform Versions
Wago 750 8202/025 002	All versions

Configuration M

4 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Wago 750 8202/040 000 Firmware	Before 18
Wago 750 8202/040 000 Firmware	Version 18
Wago 750 8202/040 000 Firmware	Version 18 patch_1
Wago 750 8202/040 000 Firmware	Version 18 patch_2

Running on/with	Platform Versions
Wago 750 8202/040 000	All versions

Configuration N

4 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Wago 750 8202/040 001 Firmware	Before 18
Wago 750 8202/040 001 Firmware	Version 18
Wago 750 8202/040 001 Firmware	Version 18 patch_1
Wago 750 8202/040 001 Firmware	Version 18 patch_2

Running on/with	Platform Versions
Wago 750 8202/040 001	All versions

Configuration O

4 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Wago 752 8303/8000 002 Firmware	Before 18
Wago 752 8303/8000 002 Firmware	Version 18
Wago 752 8303/8000 002 Firmware	Version 18 patch_1
Wago 752 8303/8000 002 Firmware	Version 18 patch_2

Running on/with	Platform Versions
Wago 752 8303/8000 002	All versions

Configuration P

4 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Wago 762 4101 Firmware	Before 18
Wago 762 4101 Firmware	Version 18
Wago 762 4101 Firmware	Version 18 patch_1
Wago 762 4101 Firmware	Version 18 patch_2

Running on/with	Platform Versions
Wago 762 4101	All versions

Configuration Q

4 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Wago 762 4102 Firmware	Before 18
Wago 762 4102 Firmware	Version 18
Wago 762 4102 Firmware	Version 18 patch_1
Wago 762 4102 Firmware	Version 18 patch_2

Running on/with	Platform Versions
Wago 762 4102	All versions

Configuration R

4 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Wago 762 4103 Firmware	Before 18
Wago 762 4103 Firmware	Version 18
Wago 762 4103 Firmware	Version 18 patch_1
Wago 762 4103 Firmware	Version 18 patch_2

Running on/with	Platform Versions
Wago 762 4103	All versions

Configuration S

4 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Wago 762 4104 Firmware	Before 18
Wago 762 4104 Firmware	Version 18
Wago 762 4104 Firmware	Version 18 patch_1
Wago 762 4104 Firmware	Version 18 patch_2

Running on/with	Platform Versions
Wago 762 4104	All versions

Configuration T

4 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Wago 762 4201/8000 001 Firmware	Before 18
Wago 762 4201/8000 001 Firmware	Version 18
Wago 762 4201/8000 001 Firmware	Version 18 patch_1
Wago 762 4201/8000 001 Firmware	Version 18 patch_2

Running on/with	Platform Versions
Wago 762 4201/8000 001	All versions

Configuration U

4 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Wago 762 4202/8000 001 Firmware	Before 18
Wago 762 4202/8000 001 Firmware	Version 18
Wago 762 4202/8000 001 Firmware	Version 18 patch_1
Wago 762 4202/8000 001 Firmware	Version 18 patch_2

Running on/with	Platform Versions
Wago 762 4202/8000 001	All versions

Configuration V

4 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Wago 762 4203/8000 001 Firmware	Before 18
Wago 762 4203/8000 001 Firmware	Version 18
Wago 762 4203/8000 001 Firmware	Version 18 patch_1
Wago 762 4203/8000 001 Firmware	Version 18 patch_2

Running on/with	Platform Versions
Wago 762 4203/8000 001	All versions

Configuration W

4 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Wago 762 4204/8000 001 Firmware	Before 18
Wago 762 4204/8000 001 Firmware	Version 18
Wago 762 4204/8000 001 Firmware	Version 18 patch_1
Wago 762 4204/8000 001 Firmware	Version 18 patch_2

Running on/with	Platform Versions
Wago 762 4204/8000 001	All versions

Configuration X

4 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Wago 762 4205/8000 001 Firmware	Before 18
Wago 762 4205/8000 001 Firmware	Version 18
Wago 762 4205/8000 001 Firmware	Version 18 patch_1
Wago 762 4205/8000 001 Firmware	Version 18 patch_2

Running on/with	Platform Versions
Wago 762 4205/8000 001	All versions

Configuration Y

4 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Wago 762 4205/8000 002 Firmware	Before 18
Wago 762 4205/8000 002 Firmware	Version 18
Wago 762 4205/8000 002 Firmware	Version 18 patch_1
Wago 762 4205/8000 002 Firmware	Version 18 patch_2

Running on/with	Platform Versions
Wago 762 4205/8000 002	All versions

Configuration Z

4 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Wago 762 4206/8000 001 Firmware	Before 18
Wago 762 4206/8000 001 Firmware	Version 18
Wago 762 4206/8000 001 Firmware	Version 18 patch_1
Wago 762 4206/8000 001 Firmware	Version 18 patch_2

Running on/with	Platform Versions
Wago 762 4206/8000 001	All versions

Configuration A

4 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Wago 762 4206/8000 002 Firmware	Before 18
Wago 762 4206/8000 002 Firmware	Version 18
Wago 762 4206/8000 002 Firmware	Version 18 patch_1
Wago 762 4206/8000 002 Firmware	Version 18 patch_2

Running on/with	Platform Versions
Wago 762 4206/8000 002	All versions

Configuration B

4 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Wago 762 4301/8000 002 Firmware	Before 18
Wago 762 4301/8000 002 Firmware	Version 18
Wago 762 4301/8000 002 Firmware	Version 18 patch_1
Wago 762 4301/8000 002 Firmware	Version 18 patch_2

Running on/with	Platform Versions
Wago 762 4301/8000 002	All versions

Configuration C

4 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Wago 762 4302/8000 002 Firmware	Before 18
Wago 762 4302/8000 002 Firmware	Version 18
Wago 762 4302/8000 002 Firmware	Version 18 patch_1
Wago 762 4302/8000 002 Firmware	Version 18 patch_2

Running on/with	Platform Versions
Wago 762 4302/8000 002	All versions

Configuration D

4 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Wago 762 4303/8000 002 Firmware	Before 18
Wago 762 4303/8000 002 Firmware	Version 18
Wago 762 4303/8000 002 Firmware	Version 18 patch_1
Wago 762 4303/8000 002 Firmware	Version 18 patch_2

Running on/with	Platform Versions
Wago 762 4303/8000 002	All versions

Configuration E

4 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Wago 762 4304/8000 002 Firmware	Before 18
Wago 762 4304/8000 002 Firmware	Version 18
Wago 762 4304/8000 002 Firmware	Version 18 patch_1
Wago 762 4304/8000 002 Firmware	Version 18 patch_2

Running on/with	Platform Versions
Wago 762 4304/8000 002	All versions

Configuration F

4 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Wago 762 4305/8000 002 Firmware	Before 18
Wago 762 4305/8000 002 Firmware	Version 18
Wago 762 4305/8000 002 Firmware	Version 18 patch_1
Wago 762 4305/8000 002 Firmware	Version 18 patch_2

Running on/with	Platform Versions
Wago 762 4305/8000 002	All versions

Configuration G

4 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Wago 762 4306/8000 002 Firmware	Before 18
Wago 762 4306/8000 002 Firmware	Version 18
Wago 762 4306/8000 002 Firmware	Version 18 patch_1
Wago 762 4306/8000 002 Firmware	Version 18 patch_2

Running on/with	Platform Versions
Wago 762 4306/8000 002	All versions

Configuration H

4 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Wago 762 5203/8000 001 Firmware	Before 18
Wago 762 5203/8000 001 Firmware	Version 18
Wago 762 5203/8000 001 Firmware	Version 18 patch_1
Wago 762 5203/8000 001 Firmware	Version 18 patch_2

Running on/with	Platform Versions
Wago 762 5203/8000 001	All versions

Configuration I

4 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Wago 762 5204/8000 001 Firmware	Before 18
Wago 762 5204/8000 001 Firmware	Version 18
Wago 762 5204/8000 001 Firmware	Version 18 patch_1
Wago 762 5204/8000 001 Firmware	Version 18 patch_2

Running on/with	Platform Versions
Wago 762 5204/8000 001	All versions

Configuration J

4 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Wago 762 5205/8000 001 Firmware	Before 18
Wago 762 5205/8000 001 Firmware	Version 18
Wago 762 5205/8000 001 Firmware	Version 18 patch_1
Wago 762 5205/8000 001 Firmware	Version 18 patch_2

Running on/with	Platform Versions
Wago 762 5205/8000 001	All versions

Configuration K

4 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Wago 762 5206/8000 001 Firmware	Before 18
Wago 762 5206/8000 001 Firmware	Version 18
Wago 762 5206/8000 001 Firmware	Version 18 patch_1
Wago 762 5206/8000 001 Firmware	Version 18 patch_2

Running on/with	Platform Versions
Wago 762 5206/8000 001	All versions

Configuration L

4 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Wago 762 5303/8000 002 Firmware	Before 18
Wago 762 5303/8000 002 Firmware	Version 18
Wago 762 5303/8000 002 Firmware	Version 18 patch_1
Wago 762 5303/8000 002 Firmware	Version 18 patch_2

Running on/with	Platform Versions
Wago 762 5303/8000 002	All versions

Configuration M

4 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Wago 762 5304/8000 002 Firmware	Before 18
Wago 762 5304/8000 002 Firmware	Version 18
Wago 762 5304/8000 002 Firmware	Version 18 patch_1
Wago 762 5304/8000 002 Firmware	Version 18 patch_2

Running on/with	Platform Versions
Wago 762 5304/8000 002	All versions

Configuration N

4 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Wago 762 5305/8000 002 Firmware	Before 18
Wago 762 5305/8000 002 Firmware	Version 18
Wago 762 5305/8000 002 Firmware	Version 18 patch_1
Wago 762 5305/8000 002 Firmware	Version 18 patch_2

Running on/with	Platform Versions
Wago 762 5305/8000 002	All versions

Configuration O

4 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Wago 762 5306/8000 002 Firmware	Before 18
Wago 762 5306/8000 002 Firmware	Version 18
Wago 762 5306/8000 002 Firmware	Version 18 patch_1
Wago 762 5306/8000 002 Firmware	Version 18 patch_2

Running on/with	Platform Versions
Wago 762 5306/8000 002	All versions

Configuration P

4 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Wago 762 6201/8000 001 Firmware	Before 18
Wago 762 6201/8000 001 Firmware	Version 18
Wago 762 6201/8000 001 Firmware	Version 18 patch_1
Wago 762 6201/8000 001 Firmware	Version 18 patch_2

Running on/with	Platform Versions
Wago 762 6201/8000 001	All versions

Configuration Q

4 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Wago 762 6202/8000 001 Firmware	Before 18
Wago 762 6202/8000 001 Firmware	Version 18
Wago 762 6202/8000 001 Firmware	Version 18 patch_1
Wago 762 6202/8000 001 Firmware	Version 18 patch_2

Running on/with	Platform Versions
Wago 762 6202/8000 001	All versions

Configuration R

4 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Wago 762 6203/8000 001 Firmware	Before 18
Wago 762 6203/8000 001 Firmware	Version 18
Wago 762 6203/8000 001 Firmware	Version 18 patch_1
Wago 762 6203/8000 001 Firmware	Version 18 patch_2

Running on/with	Platform Versions
Wago 762 6203/8000 001	All versions

Configuration S

4 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Wago 762 6204/8000 001 Firmware	Before 18
Wago 762 6204/8000 001 Firmware	Version 18
Wago 762 6204/8000 001 Firmware	Version 18 patch_1
Wago 762 6204/8000 001 Firmware	Version 18 patch_2

Running on/with	Platform Versions
Wago 762 6204/8000 001	All versions

Configuration T

4 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Wago 762 6301/8000 002 Firmware	Before 18
Wago 762 6301/8000 002 Firmware	Version 18
Wago 762 6301/8000 002 Firmware	Version 18 patch_1
Wago 762 6301/8000 002 Firmware	Version 18 patch_2

Running on/with	Platform Versions
Wago 762 6301/8000 002	All versions

Configuration U

4 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Wago 762 6302/8000 002 Firmware	Before 18
Wago 762 6302/8000 002 Firmware	Version 18
Wago 762 6302/8000 002 Firmware	Version 18 patch_1
Wago 762 6302/8000 002 Firmware	Version 18 patch_2

Running on/with	Platform Versions
Wago 762 6302/8000 002	All versions

Configuration V

4 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Wago 762 6303/8000 002 Firmware	Before 18
Wago 762 6303/8000 002 Firmware	Version 18
Wago 762 6303/8000 002 Firmware	Version 18 patch_1
Wago 762 6303/8000 002 Firmware	Version 18 patch_2

Running on/with	Platform Versions
Wago 762 6303/8000 002	All versions

Configuration W

4 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Wago 762 6304/8000 002 Firmware	Before 18
Wago 762 6304/8000 002 Firmware	Version 18
Wago 762 6304/8000 002 Firmware	Version 18 patch_1
Wago 762 6304/8000 002 Firmware	Version 18 patch_2

Running on/with	Platform Versions
Wago 762 6304/8000 002	All versions

Related CWEs

CWE-120

Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

The product copies an input buffer to an output buffer without verifying that the size of the input buffer is less than the size of the output buffer, leading to a buffer overflow.

References (2)

https://cert.vde.com/en/advisories/VDE-2020-036/

Source: info@cert.vde.com

Vendor Advisory

https://cert.vde.com/en/advisories/VDE-2020-036/

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

Timeline

No history available yet.