CVE-2021-34595

Published: Oct 26, 2021Modified: Jun 17, 2026

8.1

Vector

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H

Exploitability: 2.8 / Impact: 5.2

Source: NVD

Description

A crafted request with invalid offsets may cause an out-of-bounds read or write access in CODESYS V2 Runtime Toolkit 32 Bit full and PLCWinNT prior to versions V2.4.7.56, resulting in a denial-of-service condition or local memory overwrite.

Affected (30)

Products: Wago: 750 823 Firmware, 750 829 Firmware, 750 831 Firmware, 750 832 Firmware, 750 852 Firmware, 750 862 Firmware, 750 880 Firmware, 750 881 Firmware, 750 882 Firmware, 750 885 Firmware, 750 889 Firmware, 750 890 Firmware, 750 891 Firmware, 750 893 Firmware, 750 8202 Firmware, 750 8203 Firmware, 750 8204 Firmware, 750 8206 Firmware, 750 8207 Firmware, 750 8208 Firmware, 750 8210 Firmware, 750 8211 Firmware, 750 8212 Firmware, 750 8213 Firmware, 750 8214 Firmware, 750 8216 Firmware, 750 8217 Firmware · Codesys: Codesys, Plcwinnt, Runtime Toolkit

27 products

3 products

Configuration A

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Wago 750 823 Firmware	Before fw10

Running on/with	Platform Versions
Wago 750 823	All versions

Configuration B

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Wago 750 829 Firmware	Before fw17

Running on/with	Platform Versions
Wago 750 829	All versions

Configuration C

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Wago 750 831 Firmware	Before fw17

Running on/with	Platform Versions
Wago 750 831	All versions

Configuration D

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Wago 750 832 Firmware	Before fw10

Running on/with	Platform Versions
Wago 750 832	All versions

Configuration E

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Wago 750 852 Firmware	Before fw17

Running on/with	Platform Versions
Wago 750 852	All versions

Configuration F

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Wago 750 862 Firmware	Before fw10

Running on/with	Platform Versions
Wago 750 862	All versions

Configuration G

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Wago 750 880 Firmware	Before fw17

Running on/with	Platform Versions
Wago 750 880	All versions

Configuration H

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Wago 750 881 Firmware	Before fw17

Running on/with	Platform Versions
Wago 750 881	All versions

Configuration I

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Wago 750 882 Firmware	Before fw17

Running on/with	Platform Versions
Wago 750 882	All versions

Configuration J

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Wago 750 885 Firmware	Before fw17

Running on/with	Platform Versions
Wago 750 885	All versions

Configuration K

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Wago 750 889 Firmware	Before fw17

Running on/with	Platform Versions
Wago 750 889	All versions

Configuration L

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Wago 750 890 Firmware	Before fw10

Running on/with	Platform Versions
Wago 750 890	All versions

Configuration M

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Wago 750 891 Firmware	Before fw10

Running on/with	Platform Versions
Wago 750 891	All versions

Configuration N

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Wago 750 893 Firmware	Before fw10

Running on/with	Platform Versions
Wago 750 893	All versions

Configuration O

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Wago 750 8202 Firmware	Before fw20

Running on/with	Platform Versions
Wago 750 8202	All versions

Configuration P

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Wago 750 8203 Firmware	Before fw20

Running on/with	Platform Versions
Wago 750 8203	All versions

Configuration Q

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Wago 750 8204 Firmware	Before fw20

Running on/with	Platform Versions
Wago 750 8204	All versions

Configuration R

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Wago 750 8206 Firmware	Before fw20

Running on/with	Platform Versions
Wago 750 8206	All versions

Configuration S

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Wago 750 8207 Firmware	Before fw20

Running on/with	Platform Versions
Wago 750 8207	All versions

Configuration T

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Wago 750 8208 Firmware	Before fw20

Running on/with	Platform Versions
Wago 750 8208	All versions

Configuration U

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Wago 750 8210 Firmware	Before fw20

Running on/with	Platform Versions
Wago 750 8210	All versions

Configuration V

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Wago 750 8211 Firmware	Before fw20

Running on/with	Platform Versions
Wago 750 8211	All versions

Configuration W

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Wago 750 8212 Firmware	Before fw20

Running on/with	Platform Versions
Wago 750 8212	All versions

Configuration X

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Wago 750 8213 Firmware	Before fw20

Running on/with	Platform Versions
Wago 750 8213	All versions

Configuration Y

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Wago 750 8214 Firmware	Before fw20

Running on/with	Platform Versions
Wago 750 8214	All versions

Configuration Z

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Wago 750 8216 Firmware	Before fw20

Running on/with	Platform Versions
Wago 750 8216	All versions

Configuration A

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Wago 750 8217 Firmware	Before fw20

Running on/with	Platform Versions
Wago 750 8217	All versions

Configuration B

3 vulnerable

Vulnerable Software	Affected Versions
Codesys Codesys	Before 1.1.9.22
Codesys Plcwinnt	Before 2.4.7.56
Codesys Runtime Toolkit	Before 2.4.7.56

Related CWEs

CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

The product performs operations on a memory buffer, but it reads from or writes to a memory location outside the buffer's intended boundary. This may result in read or write operations on unexpected memory locations that could be linked to other variables, data structures, or internal program data.

CWE-823

Use of Out-of-range Pointer Offset

The product performs pointer arithmetic on a valid pointer, but it uses an offset that can point outside of the intended range of valid memory locations for the resulting pointer.

References (2)

https://customers.codesys.com/index.php?eID=dumpFile&t=f&f=16878&token=e5644ec405590e66aefa62304cb8632df9fc9e9c&download=

Source: info@cert.vde.com

Vendor Advisory

https://customers.codesys.com/index.php?eID=dumpFile&t=f&f=16878&token=e5644ec405590e66aefa62304cb8632df9fc9e9c&download=

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

Timeline

No history available yet.