In WAGO I/O-Check Service in multiple products an unauthenticated remote attacker can send a specially crafted packet containing OS commands to crash the iocheck process and write memory resulting in loss of integrity and DoS.
CVSS Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:HWago 750 8100
HWWagoall versionsWago 750 8100 Firmware
OSWago18< 18Wago 750 8101
HWWagoall versionsWago 750 8101\/025 000
HWWagoall versionsWago 750 8101\/025 000 Firmware
OSWago18< 18Wago 750 8101 Firmware
OSWago18< 18Wago 750 8102
HWWagoall versionsWago 750 8102\/025 000
HWWagoall versionsWago 750 8102\/025 000 Firmware
OSWago18< 18Wago 750 8102 Firmware
OSWago18< 18Wago 750 8202
HWWagoall versionsWago 750 8202\/000 011
HWWagoall versionsWago 750 8202\/000 011 Firmware
OSWago18< 18Wago 750 8202\/000 012
HWWagoall versionsWago 750 8202\/000 012 Firmware
OSWago18< 18Wago 750 8202\/000 022
HWWagoall versionsWago 750 8202\/000 022 Firmware
OSWago18< 18Wago 750 8202\/025 000
HWWagoall versionsWago 750 8202\/025 000 Firmware
OSWago18< 18Wago 750 8202\/025 001
HWWagoall versionsWago 750 8202\/025 001 Firmware
OSWago18< 18Wago 750 8202\/025 002
HWWagoall versionsWago 750 8202\/025 002 Firmware
OSWago18< 18Wago 750 8202\/040 000
HWWagoall versionsWago 750 8202\/040 000 Firmware
OSWago18< 18Wago 750 8202\/040 001
HWWagoall versionsWago 750 8202\/040 001 Firmware
OSWago18< 18Wago 750 8202 Firmware
OSWago18< 18Wago 752 8303\/8000 002
HWWagoall versionsWago 752 8303\/8000 002 Firmware
OSWago18< 18
🔵
CHECK WITH VENDOR
No clear patch data available. Check vendor references.
CWE
Related vulnerabilities
CVE-2022-45138CRITICAL9.8PL ✓same product
WAGO 751-9301/752-8303: Pominięcie uwierzytelnienia w API zarządzania
CVE-2022-45140CRITICAL9.8PL ✓same product
WAGO 751/752: Nieuwierzytelniony zapis danych z uprawnieniami root – RCE
CVE-2021-34569CRITICAL9.8PL ✓same product
WAGO I/O-Check Service — zapis pamięci i wykonanie poleceń OS przez sieć
CVE-2021-34584CRITICAL9.1PL ✓same product
Częściowy odczyt pamięci lub DoS w serwerze CODESYS V2 na urządzeniach WAGO
CVE-2021-30188CRITICAL9.8PL ✓same product
Stack-based Buffer Overflow w CODESYS V2 runtime — urządzenia WAGO