Skip to content
CVE PROGRAM SOURCE RECORD9.8 Critical

CVE-2021-34569

WAGO I/O-Check Service prone to Out-of-bounds Write

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
CERTVDE

Description

In WAGO I/O-Check Service in multiple products an attacker can send a specially crafted packet containing OS commands to crash the diagnostic tool and write memory.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

WAGO 750-81xx/xxx-xxxFW

Default version status: unaffected

  • FW1 to ≤ FW18 Patch 2affected

WAGO 750-82xx/xxx-xxx

Default version status: unaffected

  • FW1 to ≤ FW18 Patch 2affected

WAGO 752-8303/8000-0002

Default version status: unaffected

  • FW1 to ≤ FW18 Patch 2affected

WAGO 762-4xxx

Default version status: unaffected

  • FW1 to ≤ FW18 Patch 2affected

WAGO 762-5xxx

Default version status: unaffected

  • FW1 to ≤ FW18 Patch 2affected

WAGO 762-6xxx

Default version status: unaffected

  • FW1 to ≤ FW18 Patch 2affected

References