CVE-2021-34569 — WAGO I/O-Check Service prone to Out-of-bounds Write

CVE-2021-34569

WAGO I/O-Check Service prone to Out-of-bounds Write PUBLISHED

Description (CNA)

In WAGO I/O-Check Service in multiple products an attacker can send a specially crafted packet containing OS commands to crash the diagnostic tool and write memory.

Affected (CNA)

Vendor / product	Versions
WAGO / 750-81xx/xxx-xxxFW	affected FW1 through FW18 Patch 2
WAGO / 750-82xx/xxx-xxx	affected FW1 through FW18 Patch 2
WAGO / 752-8303/8000-0002	affected FW1 through FW18 Patch 2
WAGO / 762-4xxx	affected FW1 through FW18 Patch 2
WAGO / 762-5xxx	affected FW1 through FW18 Patch 2
WAGO / 762-6xxx	affected FW1 through FW18 Patch 2

CWE

CWE-787

References

https://cert.vde.com/en/advisories/VDE-2020-036/

ADP enrichment

CVE

No English description supplied.

https://cert.vde.com/en/advisories/VDE-2020-036/

CISA-ADP

No English description supplied.

No references supplied.