CVE-2021-34567 — WAGO I/O-Check Service prone to Out-of-bounds Read

Description (CNA)

In WAGO I/O-Check Service in multiple products an unauthenticated remote attacker can send a specially crafted packet containing OS commands to provoke a denial of service and an limited out-of-bounds read.

Affected (CNA)

Vendor / product	Versions
WAGO / 750-81xx/xxx-xxxFW	affected FW1 through FW18 Patch 2
WAGO / 750-82xx/xxx-xxx	affected FW1 through FW18 Patch 2
WAGO / 752-8303/8000-0002	affected FW1 through FW18 Patch 2
WAGO / 762-4xxx	affected FW1 through FW18 Patch 2
WAGO / 762-5xxx	affected FW1 through FW18 Patch 2
WAGO / 762-6xxx	affected FW1 through FW18 Patch 2

CWE

CWE-125

References

https://cert.vde.com/en/advisories/VDE-2020-036/

ADP enrichment

CVE

No English description supplied.

https://cert.vde.com/en/advisories/VDE-2020-036/

CISA-ADP

No English description supplied.

No references supplied.