CVE-2015-10123 — Wago: Buffer Copy without Checking Size of Input in wbm of multiple products

Description (CNA)

An unautheticated remote attacker could send specifically crafted packets to a affected device. If an authenticated user then views that data in a specific page of the web-based management a buffer overflow will be triggered to gain full access of the device.

Affected (CNA)

Vendor / product	Versions
WAGO / Controller BACnet/IP	affected 0 through FW13
WAGO / Controller BACnet MS/TP	affected 0 through FW13
WAGO / Ethernet Controller 3rd Generation	affected 0 through FW13
WAGO / Ethernet Controller 3rd Generation	affected 0 through FW13
WAGO / Fieldbus Coupler Ethernet 3rd Generation	affected 0 through FW13

CWE

CWE-120

References

https://cert.vde.com/en/advisories/VDE-2023-039/

ADP enrichment

CVE

No English description supplied.

https://cert.vde.com/en/advisories/VDE-2023-039/

CISA-ADP

No English description supplied.

No references supplied.