CVE-2021-34593

Published: Oct 26, 2021Modified: Jun 17, 2026

7.5

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Exploitability: 3.9 / Impact: 3.6

Source: NVD (Secondary)

Description

In CODESYS V2 Runtime Toolkit 32 Bit full and PLCWinNT prior to versions V2.4.7.56 unauthenticated crafted invalid requests may result in several denial-of-service conditions. Running PLC programs may be stopped, memory may be leaked, or further communication clients may be blocked from accessing the PLC.

Affected (15)

Products: Wago: 750 8202 Firmware, 750 8203 Firmware, 750 8204 Firmware, 750 8206 Firmware, 750 8207 Firmware, 750 8208 Firmware, 750 8210 Firmware, 750 8211 Firmware, 750 8212 Firmware, 750 8213 Firmware, 750 8214 Firmware, 750 8216 Firmware, 750 8217 Firmware · Codesys: Plcwinnt, Runtime Toolkit

13 products

2 products

Configuration A

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Wago 750 8202 Firmware	Before fw20

Running on/with	Platform Versions
Wago 750 8202	All versions

Configuration B

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Wago 750 8203 Firmware	Before fw20

Running on/with	Platform Versions
Wago 750 8203	All versions

Configuration C

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Wago 750 8204 Firmware	Before fw20

Running on/with	Platform Versions
Wago 750 8204	All versions

Configuration D

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Wago 750 8206 Firmware	Before fw20

Running on/with	Platform Versions
Wago 750 8206	All versions

Configuration E

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Wago 750 8207 Firmware	Before fw20

Running on/with	Platform Versions
Wago 750 8207	All versions

Configuration F

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Wago 750 8208 Firmware	Before fw20

Running on/with	Platform Versions
Wago 750 8208	All versions

Configuration G

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Wago 750 8210 Firmware	Before fw20

Running on/with	Platform Versions
Wago 750 8210	All versions

Configuration H

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Wago 750 8211 Firmware	Before fw20

Running on/with	Platform Versions
Wago 750 8211	All versions

Configuration I

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Wago 750 8212 Firmware	Before fw20

Running on/with	Platform Versions
Wago 750 8212	All versions

Configuration J

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Wago 750 8213 Firmware	Before fw20

Running on/with	Platform Versions
Wago 750 8213	All versions

Configuration K

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Wago 750 8214 Firmware	Before fw20

Running on/with	Platform Versions
Wago 750 8214	All versions

Configuration L

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Wago 750 8216 Firmware	Before fw20

Running on/with	Platform Versions
Wago 750 8216	All versions

Configuration M

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Wago 750 8217 Firmware	Before fw20

Running on/with	Platform Versions
Wago 750 8217	All versions

Configuration N

2 vulnerable

Vulnerable Software	Affected Versions
Codesys Plcwinnt	Before 2.4.7.56
Codesys Runtime Toolkit	Before 2.4.7.56

Related CWEs

CWE-755

Improper Handling of Exceptional Conditions

The product does not handle or incorrectly handles an exceptional condition.

References (8)

http://packetstormsecurity.com/files/164716/CODESYS-2.4.7.0-Denial-Of-Service.html

Source: info@cert.vde.com

ExploitThird Party AdvisoryVDB Entry

http://packetstormsecurity.com/files/165874/WAGO-750-8xxx-PLC-Denial-Of-Service-User-Enumeration.html

Source: info@cert.vde.com

ExploitThird Party AdvisoryVDB Entry

http://seclists.org/fulldisclosure/2021/Oct/64

Source: info@cert.vde.com

Mailing ListThird Party Advisory

https://customers.codesys.com/index.php?eID=dumpFile&t=f&f=16877&token=8faab0fc1e069f4edfca5d5aba8146139f67a175&download=

Source: info@cert.vde.com

Vendor Advisory

http://packetstormsecurity.com/files/164716/CODESYS-2.4.7.0-Denial-Of-Service.html

Source: af854a3a-2127-422b-91ae-364da2661108

ExploitThird Party AdvisoryVDB Entry

http://packetstormsecurity.com/files/165874/WAGO-750-8xxx-PLC-Denial-Of-Service-User-Enumeration.html

Source: af854a3a-2127-422b-91ae-364da2661108

ExploitThird Party AdvisoryVDB Entry

http://seclists.org/fulldisclosure/2021/Oct/64

Source: af854a3a-2127-422b-91ae-364da2661108

Mailing ListThird Party Advisory

https://customers.codesys.com/index.php?eID=dumpFile&t=f&f=16877&token=8faab0fc1e069f4edfca5d5aba8146139f67a175&download=

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

Timeline

No history available yet.