Vulnerability · Published Jun 26, 2023 · Assigned by CERTVDE
CVE-2023-1620WAGO: DoS in multiple products in multiple versions using Codesys
Medium 4.9
In plain English
A medium-severity security flaw in 750-331 from Wago. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.9% (higher than 58% of all known vulnerabilities).
Severity (CVSS 3.1)4.9Medium
Exploit odds (30 days)0.9%top 41.7% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known
Official description
Multiple WAGO devices in multiple versions may allow an authenticated remote attacker with high privileges to DoS the device by sending a specifically crafted packet to the CODESYS V2 runtime.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| Wago | 750-8202/xxx-xxx | FW1 – through FW22 SP1 |
| Wago | 750-8203/xxx-xxx | FW1 – through FW22 SP1 |
| Wago | 750-8204/xxx-xxx | FW1 – through FW22 SP1 |
| Wago | 750-8206/xxx-xxx | FW1 – through FW22 SP1 |
| Wago | 750-8207/xxx-xxx | FW1 – through FW22 SP1 |
| Wago | 750-8208/xxx-xxx | FW1 – through FW22 SP1 |
| Wago | 750-8210/xxx-xxx | FW1 – through FW22 SP1 |
| Wago | 750-8211/xxx-xxx | FW1 – through FW22 SP1 |
| Wago | 750-8212/xxx-xxx | FW1 – through FW22 SP1 |
| Wago | 750-8213/xxx-xxx | FW1 – through FW22 SP1 |
| Wago | 750-8214/xxx-xxx | FW1 – through FW22 SP1 |
| Wago | 750-8216/xxx-xxx | FW1 – through FW22 SP1 |
| Wago | 750-8217/xxx-xxx | FW1 – through FW22 SP1 |
| Wago | 750-823 | FW1 – through FW10 |
| Wago | 750-332 | FW1 – through FW6 |
| Wago | 750-832/xxx-xxx | FW1 – through FW6 |
| Wago | 750-862 | FW1 – through FW10 |
| Wago | 750-890/xxx-xxx | FW1 – through FW10 |
| Wago | 750-891 | FW1 – through FW10 |
| Wago | 750-893 | FW1 – through FW10 |
| Wago | 750-331 | FW1 – through FW14 |
| Wago | 750-829 | FW1 – through FW14 |
| Wago | 750-831/xxx-xxx | FW1 – through FW14 |
| Wago | 750-852 | FW1 – through FW16 |
| Wago | 750-880/xxx-xxx | FW1 – through FW16 |
| Wago | 750-881 | FW1 – through FW16 |
| Wago | 750-882 | FW1 – through FW16 |
| Wago | 750-885/xxx-xxx | FW1 – through FW16 |
| Wago | 750-889 | FW1 – through FW16 |
Weakness: CWE-1288 · Vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H
References
- https://cert.vde.com/en/advisories/VDE-2023-006/ vendor-advisory