Description
In WAGO I/O-Check Service in multiple products an unauthenticated remote attacker can send a specially crafted packet containing OS commands to provoke a denial of service and an limited out-of-bounds read.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
WAGO 750-81xx/xxx-xxxFW
Default version status: unaffected
FW1 to ≤ FW18 Patch 2affected
WAGO 750-82xx/xxx-xxx
Default version status: unaffected
FW1 to ≤ FW18 Patch 2affected
WAGO 752-8303/8000-0002
Default version status: unaffected
FW1 to ≤ FW18 Patch 2affected
WAGO 762-4xxx
Default version status: unaffected
FW1 to ≤ FW18 Patch 2affected
WAGO 762-5xxx
Default version status: unaffected
FW1 to ≤ FW18 Patch 2affected
WAGO 762-6xxx
Default version status: unaffected
FW1 to ≤ FW18 Patch 2affected