Lucene search

[email protected]CVE-2021-34566

HistoryNov 09, 2022 - 4:15 p.m.

CVE-2021-34566

2022-11-0916:15:00

CWE-120

[email protected]

web.nvd.nist.gov

wago

i/o-check service

cve-2021-34566

vulnerability

nvd

dos

remote attacker

os commands

9.1 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H

9.2 High

AI Score

Confidence

High

6.4 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:P/A:P

0.002 Low

EPSS

Percentile

55.4%

JSON

In WAGO I/O-Check Service in multiple products an unauthenticated remote attacker can send a specially crafted packet containing OS commands to crash the iocheck process and write memory resulting in loss of integrity and DoS.

CPENameOperatorVersion
wago:750-8100_firmwarewago 750-8100 firmwarelt18
wago:750-8101_firmwarewago 750-8101 firmwarelt18
wago:750-8101\/025-000_firmwarewago 750-8101\/025-000 firmwarelt18
wago:750-8102_firmwarewago 750-8102 firmwarelt18
wago:750-8102\/025-000_firmwarewago 750-8102\/025-000 firmwarelt18
wago:750-8202_firmwarewago 750-8202 firmwarelt18
wago:750-8202\/000-011_firmwarewago 750-8202\/000-011 firmwarelt18
wago:750-8202\/000-012_firmwarewago 750-8202\/000-012 firmwarelt18
wago:750-8202\/000-022_firmwarewago 750-8202\/000-022 firmwarelt18
wago:750-8202\/025-000_firmwarewago 750-8202\/025-000 firmwarelt18

CPE	Name	Operator	Version
wago:750-8100_firmware	wago 750-8100 firmware	lt	18
wago:750-8101_firmware	wago 750-8101 firmware	lt	18
wago:750-8101\/025-000_firmware	wago 750-8101\/025-000 firmware	lt	18
wago:750-8102_firmware	wago 750-8102 firmware	lt	18
wago:750-8102\/025-000_firmware	wago 750-8102\/025-000 firmware	lt	18
wago:750-8202_firmware	wago 750-8202 firmware	lt	18
wago:750-8202\/000-011_firmware	wago 750-8202\/000-011 firmware	lt	18
wago:750-8202\/000-012_firmware	wago 750-8202\/000-012 firmware	lt	18
wago:750-8202\/000-022_firmware	wago 750-8202\/000-022 firmware	lt	18
wago:750-8202\/025-000_firmware	wago 750-8202\/025-000 firmware	lt	18

Rows per page:

1-10 of 491

References

cert.vde.com/en/advisories/VDE-2020-036/

Social References

9.1 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H

9.2 High

AI Score

Confidence

High

6.4 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:P/A:P

0.002 Low

EPSS

Percentile

55.4%

JSON

Related for CVE-2021-34566

prion1 nessus1 cvelist1 threatpost1 thn1