CVE-2023-5188

Published: Dec 5, 2023Modified: Jun 17, 2026

7.5

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Exploitability: 3.9 / Impact: 3.6

Source: info@cert.vde.com (Secondary)

Description

The MMS Interpreter of WagoAppRTU in versions below 1.4.6.0 which is used by the WAGO Telecontrol Configurator is vulnerable to malformed packets. An remote unauthenticated attacker could send specifically crafted packets that lead to a denial-of-service condition until restart of the affected device.

Affected (2)

Products: Wago: Telecontrol Configurator, Wagoapprtu

2 products

Telecontrol Configurator

Configuration A

2 vulnerable

Vulnerable Software	Affected Versions
Wago Telecontrol Configurator	All versions
Wago Wagoapprtu	Before 1.4.6.0

Related CWEs

Improper Input Validation

The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

References (2)

https://cert.vde.com/en/advisories/VDE-2023-044/

Source: info@cert.vde.com

Third Party Advisory

https://cert.vde.com/en/advisories/VDE-2023-044/

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party Advisory

Timeline

No history available yet.