Skip to content
CVE PROGRAM SOURCE RECORD7.5 High

CVE-2023-5188

WAGO Improper Input Validation in IEC61850 Server / Telecontrol

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
CERTVDE

Description

The MMS Interpreter of WagoAppRTU in versions below 1.4.6.0 which is used by the WAGO Telecontrol Configurator is vulnerable to malformed packets. An remote unauthenticated attacker could send specifically crafted packets that lead to a denial-of-service condition until restart of the affected device.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

WAGO Telecontrol Configurator

Default version status: unaffected

  • *affected

WAGO WagoAppRTU

Default version status: unaffected

  • 0 to < 1.4.6.0affected

References