CVE-2021-34569
9.8
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Exploitability: 3.9 / Impact: 5.9
Source: info@cert.vde.com (Secondary)
Description
In WAGO I/O-Check Service in multiple products an attacker can send a specially crafted packet containing OS commands to crash the diagnostic tool and write memory.
Affected (196)
Products: Wago: 750 8100 Firmware, 750 8101 Firmware, 750 8101/025 000 Firmware, 750 8102 Firmware, 750 8102/025 000 Firmware, 750 8202 Firmware, 750 8202/000 011 Firmware, 750 8202/000 012 Firmware, 750 8202/000 022 Firmware, 750 8202/025 000 Firmware, 750 8202/025 001 Firmware, 750 8202/025 002 Firmware, 750 8202/040 000 Firmware, 750 8202/040 001 Firmware, 752 8303/8000 002 Firmware, 762 4101 Firmware, 762 4102 Firmware, 762 4103 Firmware, 762 4104 Firmware, 762 4201/8000 001 Firmware, 762 4202/8000 001 Firmware, 762 4203/8000 001 Firmware, 762 4204/8000 001 Firmware, 762 4205/8000 001 Firmware, 762 4205/8000 002 Firmware, 762 4206/8000 001 Firmware, 762 4206/8000 002 Firmware, 762 4301/8000 002 Firmware, 762 4302/8000 002 Firmware, 762 4303/8000 002 Firmware, 762 4304/8000 002 Firmware, 762 4305/8000 002 Firmware, 762 4306/8000 002 Firmware, 762 5203/8000 001 Firmware, 762 5204/8000 001 Firmware, 762 5205/8000 001 Firmware, 762 5206/8000 001 Firmware, 762 5303/8000 002 Firmware, 762 5304/8000 002 Firmware, 762 5305/8000 002 Firmware, 762 5306/8000 002 Firmware, 762 6201/8000 001 Firmware, 762 6202/8000 001 Firmware, 762 6203/8000 001 Firmware, 762 6204/8000 001 Firmware, 762 6301/8000 002 Firmware, 762 6302/8000 002 Firmware, 762 6303/8000 002 Firmware, 762 6304/8000 002 Firmware
Configuration A
| Vulnerable Software | Affected Versions |
|---|---|
| Before 18 |
| Running on/with | Platform Versions |
|---|---|
Wago 750 8100 | All versions |
Configuration B
| Vulnerable Software | Affected Versions |
|---|---|
| Before 18 |
| Running on/with | Platform Versions |
|---|---|
Wago 750 8101 | All versions |
Configuration C
| Vulnerable Software | Affected Versions |
|---|---|
| Before 18 |
| Running on/with | Platform Versions |
|---|---|
Wago 750 8101/025 000 | All versions |
Configuration D
| Vulnerable Software | Affected Versions |
|---|---|
| Before 18 |
| Running on/with | Platform Versions |
|---|---|
Wago 750 8102 | All versions |
Configuration E
| Vulnerable Software | Affected Versions |
|---|---|
| Before 18 |
| Running on/with | Platform Versions |
|---|---|
Wago 750 8102/025 000 | All versions |
Configuration F
| Vulnerable Software | Affected Versions |
|---|---|
| Before 18 |
| Running on/with | Platform Versions |
|---|---|
Wago 750 8202 | All versions |
Configuration G
| Vulnerable Software | Affected Versions |
|---|---|
| Before 18 |
| Running on/with | Platform Versions |
|---|---|
Wago 750 8202/000 011 | All versions |
Configuration H
| Vulnerable Software | Affected Versions |
|---|---|
| Before 18 |
| Running on/with | Platform Versions |
|---|---|
Wago 750 8202/000 012 | All versions |
Configuration I
| Vulnerable Software | Affected Versions |
|---|---|
| Before 18 |
| Running on/with | Platform Versions |
|---|---|
Wago 750 8202/000 022 | All versions |
Configuration J
| Vulnerable Software | Affected Versions |
|---|---|
| Before 18 |
| Running on/with | Platform Versions |
|---|---|
Wago 750 8202/025 000 | All versions |
Configuration K
| Vulnerable Software | Affected Versions |
|---|---|
| Before 18 |
| Running on/with | Platform Versions |
|---|---|
Wago 750 8202/025 001 | All versions |
Configuration L
| Vulnerable Software | Affected Versions |
|---|---|
| Before 18 |
| Running on/with | Platform Versions |
|---|---|
Wago 750 8202/025 002 | All versions |
Configuration M
| Vulnerable Software | Affected Versions |
|---|---|
| Before 18 |
| Running on/with | Platform Versions |
|---|---|
Wago 750 8202/040 000 | All versions |
Configuration N
| Vulnerable Software | Affected Versions |
|---|---|
| Before 18 |
| Running on/with | Platform Versions |
|---|---|
Wago 750 8202/040 001 | All versions |
Configuration O
| Vulnerable Software | Affected Versions |
|---|---|
| Before 18 |
| Running on/with | Platform Versions |
|---|---|
Wago 752 8303/8000 002 | All versions |
Configuration P
| Vulnerable Software | Affected Versions |
|---|---|
| Before 18 |
| Running on/with | Platform Versions |
|---|---|
Wago 762 4101 | All versions |
Configuration Q
| Vulnerable Software | Affected Versions |
|---|---|
| Before 18 |
| Running on/with | Platform Versions |
|---|---|
Wago 762 4102 | All versions |
Configuration R
| Vulnerable Software | Affected Versions |
|---|---|
| Before 18 |
| Running on/with | Platform Versions |
|---|---|
Wago 762 4103 | All versions |
Configuration S
| Vulnerable Software | Affected Versions |
|---|---|
| Before 18 |
| Running on/with | Platform Versions |
|---|---|
Wago 762 4104 | All versions |
Configuration T
| Vulnerable Software | Affected Versions |
|---|---|
| Before 18 |
| Running on/with | Platform Versions |
|---|---|
Wago 762 4201/8000 001 | All versions |
Configuration U
| Vulnerable Software | Affected Versions |
|---|---|
| Before 18 |
| Running on/with | Platform Versions |
|---|---|
Wago 762 4202/8000 001 | All versions |
Configuration V
| Vulnerable Software | Affected Versions |
|---|---|
| Before 18 |
| Running on/with | Platform Versions |
|---|---|
Wago 762 4203/8000 001 | All versions |
Configuration W
| Vulnerable Software | Affected Versions |
|---|---|
| Before 18 |
| Running on/with | Platform Versions |
|---|---|
Wago 762 4204/8000 001 | All versions |
Configuration X
| Vulnerable Software | Affected Versions |
|---|---|
| Before 18 |
| Running on/with | Platform Versions |
|---|---|
Wago 762 4205/8000 001 | All versions |
Configuration Y
| Vulnerable Software | Affected Versions |
|---|---|
| Before 18 |
| Running on/with | Platform Versions |
|---|---|
Wago 762 4205/8000 002 | All versions |
Configuration Z
| Vulnerable Software | Affected Versions |
|---|---|
| Before 18 |
| Running on/with | Platform Versions |
|---|---|
Wago 762 4206/8000 001 | All versions |
Configuration A
| Vulnerable Software | Affected Versions |
|---|---|
| Before 18 |
| Running on/with | Platform Versions |
|---|---|
Wago 762 4206/8000 002 | All versions |
Configuration B
| Vulnerable Software | Affected Versions |
|---|---|
| Before 18 |
| Running on/with | Platform Versions |
|---|---|
Wago 762 4301/8000 002 | All versions |
Configuration C
| Vulnerable Software | Affected Versions |
|---|---|
| Before 18 |
| Running on/with | Platform Versions |
|---|---|
Wago 762 4302/8000 002 | All versions |
Configuration D
| Vulnerable Software | Affected Versions |
|---|---|
| Before 18 |
| Running on/with | Platform Versions |
|---|---|
Wago 762 4303/8000 002 | All versions |
Configuration E
| Vulnerable Software | Affected Versions |
|---|---|
| Before 18 |
| Running on/with | Platform Versions |
|---|---|
Wago 762 4304/8000 002 | All versions |
Configuration F
| Vulnerable Software | Affected Versions |
|---|---|
| Before 18 |
| Running on/with | Platform Versions |
|---|---|
Wago 762 4305/8000 002 | All versions |
Configuration G
| Vulnerable Software | Affected Versions |
|---|---|
| Before 18 |
| Running on/with | Platform Versions |
|---|---|
Wago 762 4306/8000 002 | All versions |
Configuration H
| Vulnerable Software | Affected Versions |
|---|---|
| Before 18 |
| Running on/with | Platform Versions |
|---|---|
Wago 762 5203/8000 001 | All versions |
Configuration I
| Vulnerable Software | Affected Versions |
|---|---|
| Before 18 |
| Running on/with | Platform Versions |
|---|---|
Wago 762 5204/8000 001 | All versions |
Configuration J
| Vulnerable Software | Affected Versions |
|---|---|
| Before 18 |
| Running on/with | Platform Versions |
|---|---|
Wago 762 5205/8000 001 | All versions |
Configuration K
| Vulnerable Software | Affected Versions |
|---|---|
| Before 18 |
| Running on/with | Platform Versions |
|---|---|
Wago 762 5206/8000 001 | All versions |
Configuration L
| Vulnerable Software | Affected Versions |
|---|---|
| Before 18 |
| Running on/with | Platform Versions |
|---|---|
Wago 762 5303/8000 002 | All versions |
Configuration M
| Vulnerable Software | Affected Versions |
|---|---|
| Before 18 |
| Running on/with | Platform Versions |
|---|---|
Wago 762 5304/8000 002 | All versions |
Configuration N
| Vulnerable Software | Affected Versions |
|---|---|
| Before 18 |
| Running on/with | Platform Versions |
|---|---|
Wago 762 5305/8000 002 | All versions |
Configuration O
| Vulnerable Software | Affected Versions |
|---|---|
| Before 18 |
| Running on/with | Platform Versions |
|---|---|
Wago 762 5306/8000 002 | All versions |
Configuration P
| Vulnerable Software | Affected Versions |
|---|---|
| Before 18 |
| Running on/with | Platform Versions |
|---|---|
Wago 762 6201/8000 001 | All versions |
Configuration Q
| Vulnerable Software | Affected Versions |
|---|---|
| Before 18 |
| Running on/with | Platform Versions |
|---|---|
Wago 762 6202/8000 001 | All versions |
Configuration R
| Vulnerable Software | Affected Versions |
|---|---|
| Before 18 |
| Running on/with | Platform Versions |
|---|---|
Wago 762 6203/8000 001 | All versions |
Configuration S
| Vulnerable Software | Affected Versions |
|---|---|
| Before 18 |
| Running on/with | Platform Versions |
|---|---|
Wago 762 6204/8000 001 | All versions |
Configuration T
| Vulnerable Software | Affected Versions |
|---|---|
| Before 18 |
| Running on/with | Platform Versions |
|---|---|
Wago 762 6301/8000 002 | All versions |
Configuration U
| Vulnerable Software | Affected Versions |
|---|---|
| Before 18 |
| Running on/with | Platform Versions |
|---|---|
Wago 762 6302/8000 002 | All versions |
Configuration V
| Vulnerable Software | Affected Versions |
|---|---|
| Before 18 |
| Running on/with | Platform Versions |
|---|---|
Wago 762 6303/8000 002 | All versions |
Configuration W
| Vulnerable Software | Affected Versions |
|---|---|
| Before 18 |
| Running on/with | Platform Versions |
|---|---|
Wago 762 6304/8000 002 | All versions |
References (2)
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party Advisory
Timeline
No history available yet.