CRITICAL🇵🇱 Wersja polska

CVE-2021-34578

CVSS 9.8v3.1pub. 2021-08-31upd. 2024-11-21

This vulnerability allows an attacker who has access to the WBM to read and write settings-parameters of the device by sending specifically constructed requests without authentication on multiple WAGO PLCs in firmware versions up to FW07.

CVSS Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

  • Wago 750 362

    HW
    Wago
    all versions

  • Wago 750 362 Firmware

    OS
    Wago
    ≤ fw07

  • Wago 750 363

    HW
    Wago
    all versions

  • Wago 750 363 Firmware

    OS
    Wago
    ≤ fw07

  • Wago 750 823

    HW
    Wago
    all versions

  • Wago 750 823 Firmware

    OS
    Wago
    ≤ fw07

  • Wago 750 832

    HW
    Wago
    all versions

  • Wago 750 832\/000 002

    HW
    Wago
    all versions

  • Wago 750 832\/000 002 Firmware

    OS
    Wago
    ≤ fw07

  • Wago 750 832 Firmware

    OS
    Wago
    ≤ fw07

  • Wago 750 862

    HW
    Wago
    all versions

  • Wago 750 862 Firmware

    OS
    Wago
    ≤ fw07

  • Wago 750 890\/025 000

    HW
    Wago
    all versions

  • Wago 750 890\/025 000 Firmware

    OS
    Wago
    ≤ fw07

  • Wago 750 890\/025 001

    HW
    Wago
    all versions

  • Wago 750 890\/025 001 Firmware

    OS
    Wago
    ≤ fw07

  • Wago 750 890\/025 002

    HW
    Wago
    all versions

  • Wago 750 890\/025 002 Firmware

    OS
    Wago
    ≤ fw07

  • Wago 750 890\/040 000

    HW
    Wago
    all versions

  • Wago 750 890\/040 000 Firmware

    OS
    Wago
    ≤ fw07

  • Wago 750 891

    HW
    Wago
    all versions

  • Wago 750 891 Firmware

    OS
    Wago
    ≤ fw07

  • Wago 750 893

    HW
    Wago
    all versions

  • Wago 750 893 Firmware

    OS
    Wago
    ≤ fw07
🔵
CHECK WITH VENDOR
No clear patch data available. Check vendor references.
Tags
Auth Bypass
CWE
References

Related vulnerabilities

CVE-2021-34584CRITICAL9.1PL ✓same product

Częściowy odczyt pamięci lub DoS w serwerze CODESYS V2 na urządzeniach WAGO

CVE-2021-30188CRITICAL9.8PL ✓same product

Stack-based Buffer Overflow w CODESYS V2 runtime — urządzenia WAGO

CVE-2021-30190CRITICAL9.8PL ✓same product

Nieprawidłowa kontrola dostępu w CODESYS V2 Web-Server

CVE-2021-30189CRITICAL9.8PL ✓same product

Stack-based Buffer Overflow w CODESYS V2 Web-Server (Wago 750-8xx)

CVE-2021-30192CRITICAL9.8PL ✓same product

CODESYS V2 Web-Server — błędna implementacja mechanizmu bezpieczeństwa