Vulnerability-Lookup

BDU:2023-03639

Vulnerability from fstec - Published: 20.06.2023

Title

Уязвимость микропрограммного обеспечения программируемых логических контроллеров WAGO 750, связанная с недостаточной проверкой вводимых данных, позволяющая нарушителю вызвать отказ в обслуживании

Description

Уязвимость микропрограммного обеспечения программируемых логических контроллеров WAGO 750 связана с недостаточной проверкой вводимых данных. Эксплуатация уязвимости может позволить нарушителю, действующему удаленно, вызвать отказ в обслуживании с помощью специально сформированных пакетов

Severity ?


                    
                      AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H

Vendor

WAGO Kontakttechnik GmbH & Co. KG

Software Name

WAGO 750-8202, WAGO 750-8203, WAGO 750-8204, WAGO 750-8206, WAGO 750-8207, WAGO 750-8208, WAGO 750-8210, WAGO 750-8211, WAGO 750-8212, WAGO 750-8213, WAGO 750-8214, WAGO 750-8216, WAGO 750-8217, WAGO 750-823, WAGO 750-332, WAGO 750-832, WAGO 750-862, WAGO 750-890, WAGO 750-891, WAGO 750-893, WAGO 750-829, WAGO 750-331, WAGO 750-831, WAGO 750-852, WAGO 750-880, WAGO 750-881, WAGO 750-882, WAGO 750-885, WAGO 750-889

Software Version

до FW 22 Patch 2 (WAGO 750-8202), до FW 22 Patch 2 (WAGO 750-8203), до FW 22 Patch 2 (WAGO 750-8204), до FW 22 Patch 2 (WAGO 750-8206), до FW 22 Patch 2 (WAGO 750-8207), до FW 22 Patch 2 (WAGO 750-8208), до FW 22 Patch 2 (WAGO 750-8210), до FW 22 Patch 2 (WAGO 750-8211), до FW 22 Patch 2 (WAGO 750-8212), до FW 22 Patch 2 (WAGO 750-8213), до FW 22 Patch 2 (WAGO 750-8214), до FW 22 Patch 2 (WAGO 750-8216), до FW 22 Patch 2 (WAGO 750-8217), до FW 11 (WAGO 750-823), до FW 11 (WAGO 750-332), до FW 11 (WAGO 750-832), до FW 11 (WAGO 750-862), до FW 11 (WAGO 750-890), до FW 11 (WAGO 750-891), до FW 11 (WAGO 750-893), до FW 17 (WAGO 750-829), до FW 17 (WAGO 750-331), до FW 17 (WAGO 750-831), до FW 17 (WAGO 750-852), до FW 17 (WAGO 750-880), до FW 17 (WAGO 750-881), до FW 17 (WAGO 750-882), до FW 17 (WAGO 750-885), до FW 17 (WAGO 750-889)

Possible Mitigations

Компенсирующие меры: - ограничение доступа из внешних сетей (Интернет); - использование средств межсетевого экранирования для ограничения удалённого доступа; - использование виртуальных частных сетей для организации удаленного доступа (VPN). Использование рекомендаций: https://www.forescout.com/resources/concluding-ot-icefall-report/

Reference

https://www.forescout.com/resources/concluding-ot-icefall-report/ https://vuldb.com/?id.232365 https://cert.vde.com/en/advisories/VDE-2023-006/

CWE

CWE-20, CWE-404

JSON

To clipboard

{
  "CVSS 2.0": "AV:N/AC:L/Au:M/C:N/I:N/A:C",
  "CVSS 3.0": "AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H",
  "CVSS 4.0": null,
  "remediation_\u0418\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440": null,
  "remediation_\u041d\u0430\u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u0435": null,
  "\u0412\u0435\u043d\u0434\u043e\u0440 \u041f\u041e": "WAGO Kontakttechnik GmbH \u0026 Co. KG",
  "\u0412\u0435\u0440\u0441\u0438\u044f \u041f\u041e": "\u0434\u043e FW 22 Patch 2 (WAGO 750-8202), \u0434\u043e FW 22 Patch 2 (WAGO 750-8203), \u0434\u043e FW 22 Patch 2 (WAGO 750-8204), \u0434\u043e FW 22 Patch 2 (WAGO 750-8206), \u0434\u043e FW 22 Patch 2 (WAGO 750-8207), \u0434\u043e FW 22 Patch 2 (WAGO 750-8208), \u0434\u043e FW 22 Patch 2 (WAGO 750-8210), \u0434\u043e FW 22 Patch 2 (WAGO 750-8211), \u0434\u043e FW 22 Patch 2 (WAGO 750-8212), \u0434\u043e FW 22 Patch 2 (WAGO 750-8213), \u0434\u043e FW 22 Patch 2 (WAGO 750-8214), \u0434\u043e FW 22 Patch 2 (WAGO 750-8216), \u0434\u043e FW 22 Patch 2 (WAGO 750-8217), \u0434\u043e FW 11 (WAGO 750-823), \u0434\u043e FW 11 (WAGO 750-332), \u0434\u043e FW 11 (WAGO 750-832), \u0434\u043e FW 11 (WAGO 750-862), \u0434\u043e FW 11 (WAGO 750-890), \u0434\u043e FW 11 (WAGO 750-891), \u0434\u043e FW 11 (WAGO 750-893), \u0434\u043e FW 17 (WAGO 750-829), \u0434\u043e FW 17 (WAGO 750-331), \u0434\u043e FW 17 (WAGO 750-831), \u0434\u043e FW 17 (WAGO 750-852), \u0434\u043e FW 17 (WAGO 750-880), \u0434\u043e FW 17 (WAGO 750-881), \u0434\u043e FW 17 (WAGO 750-882), \u0434\u043e FW 17 (WAGO 750-885), \u0434\u043e FW 17 (WAGO 750-889)",
  "\u0412\u043e\u0437\u043c\u043e\u0436\u043d\u044b\u0435 \u043c\u0435\u0440\u044b \u043f\u043e \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044e": "\u041a\u043e\u043c\u043f\u0435\u043d\u0441\u0438\u0440\u0443\u044e\u0449\u0438\u0435 \u043c\u0435\u0440\u044b:\n- \u043e\u0433\u0440\u0430\u043d\u0438\u0447\u0435\u043d\u0438\u0435 \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u0438\u0437 \u0432\u043d\u0435\u0448\u043d\u0438\u0445 \u0441\u0435\u0442\u0435\u0439 (\u0418\u043d\u0442\u0435\u0440\u043d\u0435\u0442);\n- \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435 \u0441\u0440\u0435\u0434\u0441\u0442\u0432 \u043c\u0435\u0436\u0441\u0435\u0442\u0435\u0432\u043e\u0433\u043e \u044d\u043a\u0440\u0430\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f \u0434\u043b\u044f \u043e\u0433\u0440\u0430\u043d\u0438\u0447\u0435\u043d\u0438\u044f \u0443\u0434\u0430\u043b\u0451\u043d\u043d\u043e\u0433\u043e \u0434\u043e\u0441\u0442\u0443\u043f\u0430;\n- \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435 \u0432\u0438\u0440\u0442\u0443\u0430\u043b\u044c\u043d\u044b\u0445 \u0447\u0430\u0441\u0442\u043d\u044b\u0445 \u0441\u0435\u0442\u0435\u0439 \u0434\u043b\u044f \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u0438 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u0433\u043e \u0434\u043e\u0441\u0442\u0443\u043f\u0430 (VPN).\n\n\u0418\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435 \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0430\u0446\u0438\u0439:\nhttps://www.forescout.com/resources/concluding-ot-icefall-report/",
  "\u0414\u0430\u0442\u0430 \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u0438\u044f": "20.06.2023",
  "\u0414\u0430\u0442\u0430 \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0435\u0433\u043e \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f": "11.07.2023",
  "\u0414\u0430\u0442\u0430 \u043f\u0443\u0431\u043b\u0438\u043a\u0430\u0446\u0438\u0438": "11.07.2023",
  "\u0418\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440": "BDU:2023-03639",
  "\u0418\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440\u044b \u0434\u0440\u0443\u0433\u0438\u0445 \u0441\u0438\u0441\u0442\u0435\u043c \u043e\u043f\u0438\u0441\u0430\u043d\u0438\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "CVE-2023-1620",
  "\u0418\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044f \u043e\u0431 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u0438": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0430",
  "\u041a\u043b\u0430\u0441\u0441 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043a\u043e\u0434\u0430",
  "\u041d\u0430\u0437\u0432\u0430\u043d\u0438\u0435 \u041f\u041e": "WAGO 750-8202, WAGO 750-8203, WAGO 750-8204, WAGO 750-8206, WAGO 750-8207, WAGO 750-8208, WAGO 750-8210, WAGO 750-8211, WAGO 750-8212, WAGO 750-8213, WAGO 750-8214, WAGO 750-8216, WAGO 750-8217, WAGO 750-823, WAGO 750-332, WAGO 750-832, WAGO 750-862, WAGO 750-890, WAGO 750-891, WAGO 750-893, WAGO 750-829, WAGO 750-331, WAGO 750-831, WAGO 750-852, WAGO 750-880, WAGO 750-881, WAGO 750-882, WAGO 750-885, WAGO 750-889",
  "\u041d\u0430\u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u0435 \u041e\u0421 \u0438 \u0442\u0438\u043f \u0430\u043f\u043f\u0430\u0440\u0430\u0442\u043d\u043e\u0439 \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u044b": null,
  "\u041d\u0430\u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043c\u0438\u043a\u0440\u043e\u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0433\u043e \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u0438\u0440\u0443\u0435\u043c\u044b\u0445 \u043b\u043e\u0433\u0438\u0447\u0435\u0441\u043a\u0438\u0445 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u043b\u0435\u0440\u043e\u0432 WAGO 750, \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u0430\u044f \u0441 \u043d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043e\u0447\u043d\u043e\u0439 \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u043e\u0439 \u0432\u0432\u043e\u0434\u0438\u043c\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0430\u044f \u043d\u0430\u0440\u0443\u0448\u0438\u0442\u0435\u043b\u044e \u0432\u044b\u0437\u0432\u0430\u0442\u044c \u043e\u0442\u043a\u0430\u0437 \u0432 \u043e\u0431\u0441\u043b\u0443\u0436\u0438\u0432\u0430\u043d\u0438\u0438",
  "\u041d\u0430\u043b\u0438\u0447\u0438\u0435 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u0430": "\u0414\u0430\u043d\u043d\u044b\u0435 \u0443\u0442\u043e\u0447\u043d\u044f\u044e\u0442\u0441\u044f",
  "\u041e\u043f\u0438\u0441\u0430\u043d\u0438\u0435 \u043e\u0448\u0438\u0431\u043a\u0438 CWE": "\u041d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043e\u0447\u043d\u0430\u044f \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0430 \u0432\u0432\u043e\u0434\u0438\u043c\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445 (CWE-20), \u041d\u0435\u043a\u043e\u0440\u0440\u0435\u043a\u0442\u043d\u0430\u044f \u0437\u0430\u0447\u0438\u0441\u0442\u043a\u0430 \u0438\u043b\u0438 \u043e\u0441\u0432\u043e\u0431\u043e\u0436\u0434\u0435\u043d\u0438\u0435 \u0440\u0435\u0441\u0443\u0440\u0441\u043e\u0432 (CWE-404)",
  "\u041e\u043f\u0438\u0441\u0430\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043c\u0438\u043a\u0440\u043e\u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0433\u043e \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u0438\u0440\u0443\u0435\u043c\u044b\u0445 \u043b\u043e\u0433\u0438\u0447\u0435\u0441\u043a\u0438\u0445 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u043b\u0435\u0440\u043e\u0432 WAGO 750 \u0441\u0432\u044f\u0437\u0430\u043d\u0430 \u0441 \u043d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043e\u0447\u043d\u043e\u0439 \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u043e\u0439 \u0432\u0432\u043e\u0434\u0438\u043c\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445. \u042d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043c\u043e\u0436\u0435\u0442 \u043f\u043e\u0437\u0432\u043e\u043b\u0438\u0442\u044c \u043d\u0430\u0440\u0443\u0448\u0438\u0442\u0435\u043b\u044e, \u0434\u0435\u0439\u0441\u0442\u0432\u0443\u044e\u0449\u0435\u043c\u0443 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e, \u0432\u044b\u0437\u0432\u0430\u0442\u044c \u043e\u0442\u043a\u0430\u0437 \u0432 \u043e\u0431\u0441\u043b\u0443\u0436\u0438\u0432\u0430\u043d\u0438\u0438 \u0441 \u043f\u043e\u043c\u043e\u0449\u044c\u044e \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u0441\u0444\u043e\u0440\u043c\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0445 \u043f\u0430\u043a\u0435\u0442\u043e\u0432",
  "\u041f\u043e\u0441\u043b\u0435\u0434\u0441\u0442\u0432\u0438\u044f \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": null,
  "\u041f\u0440\u043e\u0447\u0430\u044f \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044f": null,
  "\u0421\u0432\u044f\u0437\u044c \u0441 \u0438\u043d\u0446\u0438\u0434\u0435\u043d\u0442\u0430\u043c\u0438 \u0418\u0411": "\u0414\u0430\u043d\u043d\u044b\u0435 \u0443\u0442\u043e\u0447\u043d\u044f\u044e\u0442\u0441\u044f",
  "\u0421\u043e\u0441\u0442\u043e\u044f\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u041e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d\u0430",
  "\u0421\u043f\u043e\u0441\u043e\u0431 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044f": "\u041e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0433\u043e \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f",
  "\u0421\u043f\u043e\u0441\u043e\u0431 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438": "\u0417\u043b\u043e\u0443\u043f\u043e\u0442\u0440\u0435\u0431\u043b\u0435\u043d\u0438\u0435 \u0444\u0443\u043d\u043a\u0446\u0438\u043e\u043d\u0430\u043b\u043e\u043c",
  "\u0421\u0441\u044b\u043b\u043a\u0438 \u043d\u0430 \u0438\u0441\u0442\u043e\u0447\u043d\u0438\u043a\u0438": "https://www.forescout.com/resources/concluding-ot-icefall-report/\nhttps://vuldb.com/?id.232365\nhttps://cert.vde.com/en/advisories/VDE-2023-006/",
  "\u0421\u0442\u0430\u0442\u0443\u0441 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u041f\u043e\u0434\u0442\u0432\u0435\u0440\u0436\u0434\u0435\u043d\u0430 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0438\u0442\u0435\u043b\u0435\u043c",
  "\u0422\u0438\u043f \u041f\u041e": "\u041c\u0438\u043a\u0440\u043e\u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u044b\u0439 \u043a\u043e\u0434, \u041f\u041e \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e-\u0430\u043f\u043f\u0430\u0440\u0430\u0442\u043d\u043e\u0433\u043e \u0441\u0440\u0435\u0434\u0441\u0442\u0432\u0430, \u041f\u041e \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e-\u0430\u043f\u043f\u0430\u0440\u0430\u0442\u043d\u043e\u0433\u043e \u0441\u0440\u0435\u0434\u0441\u0442\u0432\u0430 \u0410\u0421\u0423 \u0422\u041f, \u041f\u041e \u0441\u0435\u0442\u0435\u0432\u043e\u0433\u043e \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e-\u0430\u043f\u043f\u0430\u0440\u0430\u0442\u043d\u043e\u0433\u043e \u0441\u0440\u0435\u0434\u0441\u0442\u0432\u0430, \u0421\u0435\u0442\u0435\u0432\u043e\u0435 \u0441\u0440\u0435\u0434\u0441\u0442\u0432\u043e",
  "\u0422\u0438\u043f \u043e\u0448\u0438\u0431\u043a\u0438 CWE": "CWE-20, CWE-404",
  "\u0423\u0440\u043e\u0432\u0435\u043d\u044c \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u0421\u0440\u0435\u0434\u043d\u0438\u0439 \u0443\u0440\u043e\u0432\u0435\u043d\u044c \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 (\u0431\u0430\u0437\u043e\u0432\u0430\u044f \u043e\u0446\u0435\u043d\u043a\u0430 CVSS 2.0 \u0441\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 6,1)\n\u0421\u0440\u0435\u0434\u043d\u0438\u0439 \u0443\u0440\u043e\u0432\u0435\u043d\u044c \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 (\u0431\u0430\u0437\u043e\u0432\u0430\u044f \u043e\u0446\u0435\u043d\u043a\u0430 CVSS 3.0 \u0441\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 4,9)"
}

CVE-2023-1620 (GCVE-0-2023-1620)

Vulnerability from cvelistv5 – Published: 2023-06-26 06:19 – Updated: 2024-11-12 14:11

Title

WAGO: DoS in multiple products in multiple versions using Codesys

Summary

Multiple WAGO devices in multiple versions may allow an authenticated remote attacker with high privileges to DoS the device by sending a specifically crafted packet to the CODESYS V2 runtime.

Severity ?

4.9 (Medium)


                        
                          CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H

CWE

CWE-1288 - Improper Validation of Consistency within Input

Assigner

CERTVDE

References

URL

Tags

https://cert.vde.com/en/advisories/VDE-2023-006/

vendor-advisory

Impacted products

Vendor

Product

Version

Wago

750-8202/xxx-xxx

Affected: FW1 , ≤ FW22 SP1 (custom)

Wago	750-8203/xxx-xxx	Affected: FW1 , ≤ FW22 SP1 (custom)
Wago	750-8204/xxx-xxx	Affected: FW1 , ≤ FW22 SP1 (custom)
Wago	750-8206/xxx-xxx	Affected: FW1 , ≤ FW22 SP1 (custom)
Wago	750-8207/xxx-xxx	Affected: FW1 , ≤ FW22 SP1 (custom)
Wago	750-8208/xxx-xxx	Affected: FW1 , ≤ FW22 SP1 (custom)
Wago	750-8210/xxx-xxx	Affected: FW1 , ≤ FW22 SP1 (custom)
Wago	750-8211/xxx-xxx	Affected: FW1 , ≤ FW22 SP1 (custom)
Wago	750-8212/xxx-xxx	Affected: FW1 , ≤ FW22 SP1 (custom)
Wago	750-8213/xxx-xxx	Affected: FW1 , ≤ FW22 SP1 (custom)
Wago	750-8214/xxx-xxx	Affected: FW1 , ≤ FW22 SP1 (custom)
Wago	750-8216/xxx-xxx	Affected: FW1 , ≤ FW22 SP1 (custom)
Wago	750-8217/xxx-xxx	Affected: FW1 , ≤ FW22 SP1 (custom)
Wago	750-823	Affected: FW1 , ≤ FW10 (custom)
Wago	750-332	Affected: FW1 , ≤ FW6 (custom)
Wago	750-832/xxx-xxx	Affected: FW1 , ≤ FW6 (custom)
Wago	750-862	Affected: FW1 , ≤ FW10 (custom)
Wago	750-890/xxx-xxx	Affected: FW1 , ≤ FW10 (custom)
Wago	750-891	Affected: FW1 , ≤ FW10 (custom)
Wago	750-893	Affected: FW1 , ≤ FW10 (custom)
Wago	750-331	Affected: FW1 , ≤ FW14 (custom)
Wago	750-829	Affected: FW1 , ≤ FW14 (custom)
Wago	750-831/xxx-xxx	Affected: FW1 , ≤ FW14 (custom)
Wago	750-852	Affected: FW1 , ≤ FW16 (custom)
Wago	750-880/xxx-xxx	Affected: FW1 , ≤ FW16 (custom)
Wago	750-881	Affected: FW1 , ≤ FW16 (custom)
Wago	750-882	Affected: FW1 , ≤ FW16 (custom)
Wago	750-885/xxx-xxx	Affected: FW1 , ≤ FW16 (custom)
Wago	750-889	Affected: FW1 , ≤ FW16 (custom)

Credits

Daniel dos Santos from Forescout Abdelrahman Hassanien from Forescout

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-02T05:57:24.833Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "vendor-advisory",
              "x_transferred"
            ],
            "url": "https://cert.vde.com/en/advisories/VDE-2023-006/"
          }
        ],
        "title": "CVE Program Container"
      },
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2023-1620",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2024-11-08T20:30:42.286955Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2024-11-12T14:11:36.673Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "750-8202/xxx-xxx",
          "vendor": "Wago",
          "versions": [
            {
              "lessThanOrEqual": "FW22 SP1",
              "status": "affected",
              "version": "FW1",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "750-8203/xxx-xxx",
          "vendor": "Wago",
          "versions": [
            {
              "lessThanOrEqual": "FW22 SP1",
              "status": "affected",
              "version": "FW1",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "750-8204/xxx-xxx",
          "vendor": "Wago",
          "versions": [
            {
              "lessThanOrEqual": "FW22 SP1",
              "status": "affected",
              "version": "FW1",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "750-8206/xxx-xxx",
          "vendor": "Wago",
          "versions": [
            {
              "lessThanOrEqual": "FW22 SP1",
              "status": "affected",
              "version": "FW1",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "750-8207/xxx-xxx",
          "vendor": "Wago",
          "versions": [
            {
              "lessThanOrEqual": "FW22 SP1",
              "status": "affected",
              "version": "FW1",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "750-8208/xxx-xxx",
          "vendor": "Wago",
          "versions": [
            {
              "lessThanOrEqual": "FW22 SP1",
              "status": "affected",
              "version": "FW1",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "750-8210/xxx-xxx",
          "vendor": "Wago",
          "versions": [
            {
              "lessThanOrEqual": "FW22 SP1",
              "status": "affected",
              "version": "FW1",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "750-8211/xxx-xxx",
          "vendor": "Wago",
          "versions": [
            {
              "lessThanOrEqual": "FW22 SP1",
              "status": "affected",
              "version": "FW1",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "750-8212/xxx-xxx",
          "vendor": "Wago",
          "versions": [
            {
              "lessThanOrEqual": "FW22 SP1",
              "status": "affected",
              "version": "FW1",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "750-8213/xxx-xxx",
          "vendor": "Wago",
          "versions": [
            {
              "lessThanOrEqual": "FW22 SP1",
              "status": "affected",
              "version": "FW1",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "750-8214/xxx-xxx",
          "vendor": "Wago",
          "versions": [
            {
              "lessThanOrEqual": "FW22 SP1",
              "status": "affected",
              "version": "FW1",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "750-8216/xxx-xxx",
          "vendor": "Wago",
          "versions": [
            {
              "lessThanOrEqual": "FW22 SP1",
              "status": "affected",
              "version": "FW1",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "750-8217/xxx-xxx",
          "vendor": "Wago",
          "versions": [
            {
              "lessThanOrEqual": "FW22 SP1",
              "status": "affected",
              "version": "FW1",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "750-823",
          "vendor": "Wago",
          "versions": [
            {
              "lessThanOrEqual": "FW10",
              "status": "affected",
              "version": "FW1",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "750-332",
          "vendor": "Wago",
          "versions": [
            {
              "lessThanOrEqual": "FW6",
              "status": "affected",
              "version": "FW1",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "750-832/xxx-xxx",
          "vendor": "Wago",
          "versions": [
            {
              "lessThanOrEqual": "FW6",
              "status": "affected",
              "version": "FW1",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "750-862",
          "vendor": "Wago",
          "versions": [
            {
              "lessThanOrEqual": "FW10",
              "status": "affected",
              "version": "FW1",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "750-890/xxx-xxx",
          "vendor": "Wago",
          "versions": [
            {
              "lessThanOrEqual": "FW10",
              "status": "affected",
              "version": "FW1",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "750-891",
          "vendor": "Wago",
          "versions": [
            {
              "lessThanOrEqual": "FW10",
              "status": "affected",
              "version": "FW1",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "750-893",
          "vendor": "Wago",
          "versions": [
            {
              "lessThanOrEqual": "FW10",
              "status": "affected",
              "version": "FW1",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "750-331",
          "vendor": "Wago",
          "versions": [
            {
              "lessThanOrEqual": "FW14",
              "status": "affected",
              "version": "FW1",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "750-829",
          "vendor": "Wago",
          "versions": [
            {
              "lessThanOrEqual": "FW14",
              "status": "affected",
              "version": "FW1",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "750-831/xxx-xxx",
          "vendor": "Wago",
          "versions": [
            {
              "lessThanOrEqual": "FW14",
              "status": "affected",
              "version": "FW1",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "750-852",
          "vendor": "Wago",
          "versions": [
            {
              "lessThanOrEqual": "FW16",
              "status": "affected",
              "version": "FW1",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "750-880/xxx-xxx",
          "vendor": "Wago",
          "versions": [
            {
              "lessThanOrEqual": "FW16",
              "status": "affected",
              "version": "FW1",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "750-881",
          "vendor": "Wago",
          "versions": [
            {
              "lessThanOrEqual": "FW16",
              "status": "affected",
              "version": "FW1",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "750-882",
          "vendor": "Wago",
          "versions": [
            {
              "lessThanOrEqual": "FW16",
              "status": "affected",
              "version": "FW1",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "750-885/xxx-xxx",
          "vendor": "Wago",
          "versions": [
            {
              "lessThanOrEqual": "FW16",
              "status": "affected",
              "version": "FW1",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "750-889",
          "vendor": "Wago",
          "versions": [
            {
              "lessThanOrEqual": "FW16",
              "status": "affected",
              "version": "FW1",
              "versionType": "custom"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "type": "reporter",
          "user": "00000000-0000-4000-9000-000000000000",
          "value": "Daniel dos Santos from Forescout"
        },
        {
          "lang": "en",
          "type": "reporter",
          "user": "00000000-0000-4000-9000-000000000000",
          "value": "Abdelrahman Hassanien from Forescout"
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "Multiple WAGO devices in multiple versions may allow an authenticated remote attacker with high privileges to DoS the device by sending a specifically crafted packet to the CODESYS V2 runtime."
            }
          ],
          "value": "Multiple WAGO devices in multiple versions may allow an authenticated remote attacker with high privileges to DoS the device by sending a specifically crafted packet to the CODESYS V2 runtime."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 4.9,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "HIGH",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en",
              "value": "GENERAL"
            }
          ]
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-1288",
              "description": "CWE-1288 Improper Validation of Consistency within Input",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2024-10-02T05:28:51.078Z",
        "orgId": "270ccfa6-a436-4e77-922e-914ec3a9685c",
        "shortName": "CERTVDE"
      },
      "references": [
        {
          "tags": [
            "vendor-advisory"
          ],
          "url": "https://cert.vde.com/en/advisories/VDE-2023-006/"
        }
      ],
      "source": {
        "advisory": "VDE-2023-006",
        "defect": [
          "CERT@VDE#64417"
        ],
        "discovery": "UNKNOWN"
      },
      "title": "WAGO: DoS in multiple products in multiple versions using Codesys",
      "x_generator": {
        "engine": "Vulnogram 0.1.0-dev"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "270ccfa6-a436-4e77-922e-914ec3a9685c",
    "assignerShortName": "CERTVDE",
    "cveId": "CVE-2023-1620",
    "datePublished": "2023-06-26T06:19:30.928Z",
    "dateReserved": "2023-03-24T10:12:26.426Z",
    "dateUpdated": "2024-11-12T14:11:36.673Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

Sightings

Author	Source	Type	Date

Nomenclature

Seen: The vulnerability was mentioned, discussed, or observed by the user.
Confirmed: The vulnerability has been validated from an analyst's perspective.
Published Proof of Concept: A public proof of concept is available for this vulnerability.
Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
Not confirmed: The user expressed doubt about the validity of the vulnerability.
Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.

Detection rules are retrieved from Rulezet.

Action not permitted

BDU:2023-03639

CVE-2023-1620 (GCVE-0-2023-1620)

Tags

Sightings

Nomenclature