Crafted web server requests can be utilised to read partial stack or heap memory or may trigger a denial-of- service condition due to a crash in the CODESYS V2 web server prior to V1.1.9.22.
CVSS Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:HCodesys
APPCodesys< 1.1.9.22Wago 750 8202
HWWagoall versionsWago 750 8202 Firmware
OSWago< fw20Wago 750 8203
HWWagoall versionsWago 750 8203 Firmware
OSWago< fw20Wago 750 8204
HWWagoall versionsWago 750 8204 Firmware
OSWago< fw20Wago 750 8206
HWWagoall versionsWago 750 8206 Firmware
OSWago< fw20Wago 750 8207
HWWagoall versionsWago 750 8207 Firmware
OSWago< fw20Wago 750 8208
HWWagoall versionsWago 750 8208 Firmware
OSWago< fw20Wago 750 8210
HWWagoall versionsWago 750 8210 Firmware
OSWago< fw20Wago 750 8211
HWWagoall versionsWago 750 8211 Firmware
OSWago< fw20Wago 750 8212
HWWagoall versionsWago 750 8212 Firmware
OSWago< fw20Wago 750 8213
HWWagoall versionsWago 750 8213 Firmware
OSWago< fw20Wago 750 8214
HWWagoall versionsWago 750 8214 Firmware
OSWago< fw20Wago 750 8216
HWWagoall versionsWago 750 8216 Firmware
OSWago< fw20Wago 750 8217
HWWagoall versionsWago 750 8217 Firmware
OSWago< fw20Wago 750 823
HWWagoall versionsWago 750 823 Firmware
OSWago< fw10Wago 750 829
HWWagoall versions
🔵
CHECK WITH VENDOR
No clear patch data available. Check vendor references.
CWE
Related vulnerabilities
CVE-2021-34566CRITICAL9.1PL ✓same product
Buffer overflow w WAGO I/O-Check Service umożliwia DoS i naruszenie integralności
CVE-2021-34569CRITICAL9.8PL ✓same product
WAGO I/O-Check Service — zapis pamięci i wykonanie poleceń OS przez sieć
CVE-2021-34578CRITICAL9.8PL ✓same product
Obejście uwierzytelnienia w WAGO PLC — nieautoryzowany odczyt i zapis ustawień
CVE-2021-30189CRITICAL9.8PL ✓same product
Stack-based Buffer Overflow w CODESYS V2 Web-Server (Wago 750-8xx)
CVE-2021-30190CRITICAL9.8PL ✓same product
Nieprawidłowa kontrola dostępu w CODESYS V2 Web-Server