CVE-2021-34585

Published: Oct 26, 2021Modified: Jun 17, 2026

7.5

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Exploitability: 3.9 / Impact: 3.6

Source: NVD (Secondary)

Description

In the CODESYS V2 web server prior to V1.1.9.22 crafted web server requests can trigger a parser error. Since the parser result is not checked under all conditions, a pointer dereference with an invalid address can occur. This leads to a denial of service situation.

Affected (28)

Products: Wago: 750 823 Firmware, 750 829 Firmware, 750 831 Firmware, 750 832 Firmware, 750 852 Firmware, 750 862 Firmware, 750 880 Firmware, 750 881 Firmware, 750 882 Firmware, 750 885 Firmware, 750 889 Firmware, 750 890 Firmware, 750 891 Firmware, 750 893 Firmware, 750 8202 Firmware, 750 8203 Firmware, 750 8204 Firmware, 750 8206 Firmware, 750 8207 Firmware, 750 8208 Firmware, 750 8210 Firmware, 750 8211 Firmware, 750 8212 Firmware, 750 8213 Firmware, 750 8214 Firmware, 750 8216 Firmware, 750 8217 Firmware · Codesys: Codesys

27 products

1 product

Configuration A

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Wago 750 823 Firmware	Before fw10

Running on/with	Platform Versions
Wago 750 823	All versions

Configuration B

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Wago 750 829 Firmware	Before fw17

Running on/with	Platform Versions
Wago 750 829	All versions

Configuration C

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Wago 750 831 Firmware	Before fw17

Running on/with	Platform Versions
Wago 750 831	All versions

Configuration D

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Wago 750 832 Firmware	Before fw10

Running on/with	Platform Versions
Wago 750 832	All versions

Configuration E

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Wago 750 852 Firmware	Before fw17

Running on/with	Platform Versions
Wago 750 852	All versions

Configuration F

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Wago 750 862 Firmware	Before fw10

Running on/with	Platform Versions
Wago 750 862	All versions

Configuration G

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Wago 750 880 Firmware	Before fw17

Running on/with	Platform Versions
Wago 750 880	All versions

Configuration H

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Wago 750 881 Firmware	Before fw17

Running on/with	Platform Versions
Wago 750 881	All versions

Configuration I

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Wago 750 882 Firmware	Before fw17

Running on/with	Platform Versions
Wago 750 882	All versions

Configuration J

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Wago 750 885 Firmware	Before fw17

Running on/with	Platform Versions
Wago 750 885	All versions

Configuration K

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Wago 750 889 Firmware	Before fw17

Running on/with	Platform Versions
Wago 750 889	All versions

Configuration L

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Wago 750 890 Firmware	Before fw10

Running on/with	Platform Versions
Wago 750 890	All versions

Configuration M

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Wago 750 891 Firmware	Before fw10

Running on/with	Platform Versions
Wago 750 891	All versions

Configuration N

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Wago 750 893 Firmware	Before fw10

Running on/with	Platform Versions
Wago 750 893	All versions

Configuration O

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Wago 750 8202 Firmware	Before fw20

Running on/with	Platform Versions
Wago 750 8202	All versions

Configuration P

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Wago 750 8203 Firmware	Before fw20

Running on/with	Platform Versions
Wago 750 8203	All versions

Configuration Q

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Wago 750 8204 Firmware	Before fw20

Running on/with	Platform Versions
Wago 750 8204	All versions

Configuration R

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Wago 750 8206 Firmware	Before fw20

Running on/with	Platform Versions
Wago 750 8206	All versions

Configuration S

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Wago 750 8207 Firmware	Before fw20

Running on/with	Platform Versions
Wago 750 8207	All versions

Configuration T

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Wago 750 8208 Firmware	Before fw20

Running on/with	Platform Versions
Wago 750 8208	All versions

Configuration U

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Wago 750 8210 Firmware	Before fw20

Running on/with	Platform Versions
Wago 750 8210	All versions

Configuration V

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Wago 750 8211 Firmware	Before fw20

Running on/with	Platform Versions
Wago 750 8211	All versions

Configuration W

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Wago 750 8212 Firmware	Before fw20

Running on/with	Platform Versions
Wago 750 8212	All versions

Configuration X

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Wago 750 8213 Firmware	Before fw20

Running on/with	Platform Versions
Wago 750 8213	All versions

Configuration Y

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Wago 750 8214 Firmware	Before fw20

Running on/with	Platform Versions
Wago 750 8214	All versions

Configuration Z

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Wago 750 8216 Firmware	Before fw20

Running on/with	Platform Versions
Wago 750 8216	All versions

Configuration A

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Wago 750 8217 Firmware	Before fw20

Running on/with	Platform Versions
Wago 750 8217	All versions

Configuration B

1 vulnerable

Vulnerable Software	Affected Versions
Codesys Codesys	Before 1.1.9.22

Related CWEs

CWE-252

Unchecked Return Value

The product does not check the return value from a method or function, which can prevent it from detecting unexpected states and conditions.

References (4)

https://customers.codesys.com/index.php?eID=dumpFile&t=f&f=16876&token=a3f1d937f95e7034879f4f2ea8e5a99b168256a7&download=

Source: info@cert.vde.com

Vendor Advisory

https://www.tenable.com/security/research/tra-2021-47

Source: info@cert.vde.com

ExploitThird Party Advisory

https://customers.codesys.com/index.php?eID=dumpFile&t=f&f=16876&token=a3f1d937f95e7034879f4f2ea8e5a99b168256a7&download=

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

https://www.tenable.com/security/research/tra-2021-47

Source: af854a3a-2127-422b-91ae-364da2661108

ExploitThird Party Advisory

Timeline

No history available yet.