CODESYS V2 Web-Server before 1.1.9.20 has Improper Access Control.
CVSS Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:HCodesys V2 Web Server
APPCodesys< 1.1.9.20Wago 750 8202
HWWagoall versionsWago 750 8202 Firmware
OSWago< 03.06.19_\(18\)Wago 750 8203
HWWagoall versionsWago 750 8203 Firmware
OSWago< 03.06.19_\(18\)Wago 750 8204
HWWagoall versionsWago 750 8204 Firmware
OSWago< 03.06.19_\(18\)Wago 750 8206
HWWagoall versionsWago 750 8206 Firmware
OSWago< 03.06.19_\(18\)Wago 750 8207
HWWagoall versionsWago 750 8207 Firmware
OSWago< 03.06.19_\(18\)Wago 750 8208
HWWagoall versionsWago 750 8208 Firmware
OSWago< 03.06.19_\(18\)Wago 750 8210
HWWagoall versionsWago 750 8210 Firmware
OSWago< 03.06.19_\(18\)Wago 750 8211
HWWagoall versionsWago 750 8211 Firmware
OSWago< 03.06.19_\(18\)Wago 750 8212
HWWagoall versionsWago 750 8212 Firmware
OSWago< 03.06.19_\(18\)Wago 750 8213
HWWagoall versionsWago 750 8213 Firmware
OSWago< 03.06.19_\(18\)Wago 750 8214
HWWagoall versionsWago 750 8214 Firmware
OSWago< 03.06.19_\(18\)Wago 750 8216
HWWagoall versionsWago 750 8216 Firmware
OSWago< 03.06.19_\(18\)Wago 750 8217
HWWagoall versionsWago 750 8217 Firmware
OSWago< 03.06.19_\(18\)Wago 750 823
HWWagoall versionsWago 750 823 Firmware
OSWago< fw08Wago 750 829
HWWagoall versions
🔵
CHECK WITH VENDOR
No clear patch data available. Check vendor references.
CWE
Related vulnerabilities
CVE-2021-34569CRITICAL9.8PL ✓same product
WAGO I/O-Check Service — zapis pamięci i wykonanie poleceń OS przez sieć
CVE-2021-34566CRITICAL9.1PL ✓same product
Buffer overflow w WAGO I/O-Check Service umożliwia DoS i naruszenie integralności
CVE-2021-34584CRITICAL9.1PL ✓same product
Częściowy odczyt pamięci lub DoS w serwerze CODESYS V2 na urządzeniach WAGO
CVE-2021-34578CRITICAL9.8PL ✓same product
Obejście uwierzytelnienia w WAGO PLC — nieautoryzowany odczyt i zapis ustawień
CVE-2021-30192CRITICAL9.8PL ✓same product
CODESYS V2 Web-Server — błędna implementacja mechanizmu bezpieczeństwa