Skip to content
CVE PROGRAM SOURCE RECORD8.8 High

CVE-2015-10123

Wago: Buffer Copy without Checking Size of Input in wbm of multiple products

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
CERTVDE

Description

An unautheticated remote attacker could send specifically crafted packets to a affected device. If an authenticated user then views that data in a specific page of the web-based management a buffer overflow will be triggered to gain full access of the device.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

WAGO Controller BACnet/IP

Default version status: unaffected

  • 0 to ≤ FW13affected

WAGO Controller BACnet MS/TP

Default version status: unaffected

  • 0 to ≤ FW13affected

WAGO Ethernet Controller 3rd Generation

Default version status: unaffected

  • 0 to ≤ FW13affected

WAGO Ethernet Controller 3rd Generation

Default version status: unaffected

  • 0 to ≤ FW13affected

WAGO Fieldbus Coupler Ethernet 3rd Generation

Default version status: unaffected

  • 0 to ≤ FW13affected

References