WAGO Series PFC100/PFC200, Series Touch Panel 600, Compact Controller CC100 and Edge Controller in multiple versions are prone to a loss of MAC-Address-Filtering after reboot. This may allow an remote attacker to circumvent the reach the network that should be protected by the MAC address filter.
CVSS Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:NWago 750 8100
HWWagoall versionsWago 750 8100 Firmware
OSWago03.01.07\(13\) – 03.10.08\(22\)Wago 750 8101
HWWagoall versionsWago 750 8101\/000 010
HWWagoall versionsWago 750 8101\/000 010 Firmware
OSWago03.01.07\(13\) – 03.10.08\(22\)Wago 750 8101\/025 000
HWWagoall versionsWago 750 8101\/025 000 Firmware
OSWago03.01.07\(13\) – 03.10.08\(22\)Wago 750 8101 Firmware
OSWago03.01.07\(13\) – 03.10.08\(22\)Wago 750 8102
HWWagoall versionsWago 750 8102\/025 000
HWWagoall versionsWago 750 8102\/025 000 Firmware
OSWago03.01.07\(13\) – 03.10.08\(22\)Wago 750 8102 Firmware
OSWago03.01.07\(13\) – 03.10.08\(22\)Wago 750 8202\/000 011
HWWagoall versionsWago 750 8202\/000 011 Firmware
OSWago03.01.07\(13\) – 03.10.08\(22\)Wago 750 8202\/000 012
HWWagoall versionsWago 750 8202\/000 012 Firmware
OSWago03.01.07\(13\) – 03.10.08\(22\)Wago 750 8202\/000 022
HWWagoall versionsWago 750 8202\/000 022 Firmware
OSWago03.01.07\(13\) – 03.10.08\(22\)Wago 750 8202\/040 000
HWWagoall versionsWago 750 8202\/040 000 Firmware
OSWago03.01.07\(13\) – 03.10.08\(22\)Wago 750 8206
HWWagoall versionsWago 750 8206\/025 000
HWWagoall versionsWago 750 8206\/025 000 Firmware
OSWago03.01.07\(13\) – 03.10.08\(22\)Wago 750 8206\/025 001
HWWagoall versionsWago 750 8206\/025 001 Firmware
OSWago03.01.07\(13\) – 03.10.08\(22\)Wago 750 8206\/040 000
HWWagoall versionsWago 750 8206\/040 000 Firmware
OSWago03.01.07\(13\) – 03.10.08\(22\)Wago 750 8206\/040 001
HWWagoall versionsWago 750 8206\/040 001 Firmware
OSWago03.01.07\(13\) – 03.10.08\(22\)Wago 750 8206 Firmware
OSWago03.01.07\(13\) – 03.10.08\(22\)
🔵
CHECK WITH VENDOR
No clear patch data available. Check vendor references.
Related vulnerabilities
CVE-2021-34566CRITICAL9.1PL ✓same product
Buffer overflow w WAGO I/O-Check Service umożliwia DoS i naruszenie integralności
CVE-2021-34569CRITICAL9.8PL ✓same product
WAGO I/O-Check Service — zapis pamięci i wykonanie poleceń OS przez sieć
CVE-2021-34584CRITICAL9.1PL ✓same product
Częściowy odczyt pamięci lub DoS w serwerze CODESYS V2 na urządzeniach WAGO
CVE-2021-30190CRITICAL9.8PL ✓same product
Nieprawidłowa kontrola dostępu w CODESYS V2 Web-Server
CVE-2021-30189CRITICAL9.8PL ✓same product
Stack-based Buffer Overflow w CODESYS V2 Web-Server (Wago 750-8xx)