Vulnerability · Published Mar 5, 2025 · Assigned by CERTVDE

CVE-2024-12650Wago: Vulnerability in libwagosnmp

Medium 5.4

In plain English

A medium-severity security flaw in CC100 0751-9x01 from WAGO. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.3% (higher than 22% of all known vulnerabilities).

Severity (CVSS 3.1)5.4Medium
Exploit odds (30 days)0.3%top 77.7% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known

Official description

An attacker with low privileges can manipulate the requested memory size, causing the application to use an invalid memory area. This could lead to a crash of the application but it does not affected other applications.

Affected products (as reported)

VendorProductVersions
WAGO CC100 0751-9x01 0 – before 04.07.01
WAGO CC100 0751-9x01 0 – before 04.07.01
WAGO Edge Controller 0752-8303/8000-0002 0 – before 04.07.01
WAGO Edge Controller 0752-8303/8000-0002 0 – before 04.07.01
WAGO PFC100 G1 0750-810x/xxxx-xxxx 0 – before 3.10.11
WAGO PFC100 G1 0750-810x/xxxx-xxxx 0 – before 04.07.01
WAGO PFC100 G2 0750-811x-xxxx-xxxx 0 – before 04.07.01
WAGO PFC100 G2 0750-811x-xxxx-xxxx 0 – before 04.07.01
WAGO PFC200 G1 750-820x-xxx-xxx 0 – before 3.10.11
WAGO PFC200 G1 750-820x-xxx-xxx 0 – before 04.07.01
WAGO PFC200 G2 750-821x-xxx-xxx 0 – before 04.07.01
WAGO PFC200 G2 750-821x-xxx-xxx 0 – before 04.07.01
WAGO TP600 0762-420x/8000-000x 0 – before 04.07.01
WAGO TP600 0762-420x/8000-000x 0 – before 04.07.01
WAGO TP600 0762-430x/8000-000x 0 – before 04.07.01
WAGO TP600 0762-430x/8000-000x 0 – before 04.07.01
WAGO TP600 0762-520x/8000-000x 0 – before 04.07.01
WAGO TP600 0762-520x/8000-000x 0 – before 04.07.01
WAGO TP600 0762-530x/8000-000x 0 – before 04.07.01
WAGO TP600 0762-530x/8000-000x 0 – before 04.07.01
WAGO TP600 0762-620x/8000-000x 0 – before 04.07.01
WAGO TP600 0762-620x/8000-000x 0 – before 04.07.01
WAGO TP600 0762-630x/8000-000x 0 – before 04.07.01
WAGO TP600 0762-630x/8000-000x 0 – before 04.07.01

Weakness: CWE-252 · Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L

References