CVE-2021-34566 — WAGO I/O-Check Service prone to Memory Overflow

Description (CNA)

In WAGO I/O-Check Service in multiple products an unauthenticated remote attacker can send a specially crafted packet containing OS commands to crash the iocheck process and write memory resulting in loss of integrity and DoS.

Affected (CNA)

Vendor / product	Versions
WAGO / 750-81xx/xxx-xxxFW	affected FW1 through FW18 Patch 2
WAGO / 750-82xx/xxx-xxx	affected FW1 through FW18 Patch 2
WAGO / 752-8303/8000-0002	affected FW1 through FW18 Patch 2
WAGO / 762-4xxx	affected FW1 through FW18 Patch 2
WAGO / 762-5xxx	affected FW1 through FW18 Patch 2
WAGO / 762-6xxx	affected FW1 through FW18 Patch 2

CWE

CWE-120

References

https://cert.vde.com/en/advisories/VDE-2020-036/

ADP enrichment

CVE

No English description supplied.

https://cert.vde.com/en/advisories/VDE-2020-036/

CISA-ADP

No English description supplied.

No references supplied.