Skip to content
CVE PROGRAM SOURCE RECORD7.5 High

CVE-2021-34568

WAGO I/O-Check Service prone to Allocation of Resources Without Limits or Throttling

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
CERTVDE

Description

In WAGO I/O-Check Service in multiple products an unauthenticated remote attacker can send a specially crafted packet containing OS commands to provoke a denial of service.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

WAGO 750-81xx/xxx-xxxFW

Default version status: unaffected

  • FW1 to ≤ FW18 Patch 2affected

WAGO 750-82xx/xxx-xxx

Default version status: unaffected

  • FW1 to ≤ FW18 Patch 2affected

WAGO 752-8303/8000-0002

Default version status: unaffected

  • FW1 to ≤ FW18 Patch 2affected

WAGO 762-4xxx

Default version status: unaffected

  • FW1 to ≤ FW18 Patch 2affected

WAGO 762-5xxx

Default version status: unaffected

  • FW1 to ≤ FW18 Patch 2affected

WAGO 762-6xxx

Default version status: unaffected

  • FW1 to ≤ FW18 Patch 2affected

References