Skip to content
CVE PROGRAM SOURCE RECORD9.1 Critical

CVE-2021-34566

WAGO I/O-Check Service prone to Memory Overflow

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
CERTVDE

Description

In WAGO I/O-Check Service in multiple products an unauthenticated remote attacker can send a specially crafted packet containing OS commands to crash the iocheck process and write memory resulting in loss of integrity and DoS.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

WAGO 750-81xx/xxx-xxxFW

Default version status: unaffected

  • FW1 to ≤ FW18 Patch 2affected

WAGO 750-82xx/xxx-xxx

Default version status: unaffected

  • FW1 to ≤ FW18 Patch 2affected

WAGO 752-8303/8000-0002

Default version status: unaffected

  • FW1 to ≤ FW18 Patch 2affected

WAGO 762-4xxx

Default version status: unaffected

  • FW1 to ≤ FW18 Patch 2affected

WAGO 762-5xxx

Default version status: unaffected

  • FW1 to ≤ FW18 Patch 2affected

WAGO 762-6xxx

Default version status: unaffected

  • FW1 to ≤ FW18 Patch 2affected

References