CVE-2021-34593

🗓️ 26 Oct 2021 09:55:51Reported by CERTVDEType

cve🔗 web.nvd.nist.gov📰️ 1 Media mentions👁 76 Views🌐 WEB

CODESYS V2 Runtime Toolkit 32 Bit full and PLCWinNT versions V2.4.7.56 unauthenticated crafted invalid requests may result in denial-of-service conditions

Reporter	Title	Published	Views	Family All 12
0day.today	CODESYS 2.4.7.0 Denial Of Service Exploit	1 Nov 202100:00	–	zdt
0day.today	WAGO 750-8xxx PLC Denial Of Service / User Enumeration Vulnerability	5 Feb 202200:00	–	zdt
Circl	CVE-2021-34593	26 Oct 202114:14	–	circl
CNNVD	CODESYS 安全漏洞	26 Oct 202100:00	–	cnnvd
Cvelist	CVE-2021-34593 CODESYS V2 runtime: unauthenticated invalid requests may result in denial-of-service	26 Oct 202109:55	–	cvelist
EUVD	EUVD-2021-21243	7 Oct 202500:30	–	euvd
NVD	CVE-2021-34593	26 Oct 202110:15	–	nvd
OSV	CVE-2021-34593	26 Oct 202110:15	–	osv
Packet Storm	WAGO 750-8xxx PLC Denial Of Service / User Enumeration	4 Feb 202200:00	–	packetstorm
Prion	Design/Logic Flaw	26 Oct 202110:15	–	prion

NVD

Vulners

Node

wago 750-8202_firmwareRange<fw20

AND

wago 750-8202Match-

Node

wago 750-8203_firmwareRange<fw20

AND

wago 750-8203Match-

Node

wago 750-8204_firmwareRange<fw20

AND

wago 750-8204Match-

Node

wago 750-8206_firmwareRange<fw20

AND

wago 750-8206Match-

Node

wago 750-8207_firmwareRange<fw20

AND

wago 750-8207Match-

Node

wago 750-8208_firmwareRange<fw20

AND

wago 750-8208Match-

Node

wago 750-8210_firmwareRange<fw20

AND

wago 750-8210Match-

Node

wago 750-8211_firmwareRange<fw20

AND

wago 750-8211Match-

Node

wago 750-8212_firmwareRange<fw20

AND

wago 750-8212Match-

Node

wago 750-8213_firmwareRange<fw20

AND

wago 750-8213Match-

Node

wago 750-8214_firmwareRange<fw20

AND

wago 750-8214Match-

Node

wago 750-8216_firmwareRange<fw20

AND

wago 750-8216Match-

Node

wago 750-8217_firmwareRange<fw20

AND

wago 750-8217Match-

Node

codesys plcwinntRange<2.4.7.56

codesys runtime_toolkitRange<2.4.7.56x86

[
  {
    "product": "CODESYS V2",
    "vendor": "CODESYS",
    "versions": [
      {
        "lessThan": "V2.4.7.56",
        "status": "affected",
        "version": "Runtime Toolkit 32 bit full",
        "versionType": "custom"
      },
      {
        "lessThan": "V2.4.7.56",
        "status": "affected",
        "version": "PLCWinNT",
        "versionType": "custom"
      }
    ]
  }
]

Source	Link
customers	www.customers.codesys.com/index.php
packetstormsecurity	www.packetstormsecurity.com/files/165874/WAGO-750-8xxx-PLC-Denial-Of-Service-User-Enumeration.html
seclists	www.seclists.org/fulldisclosure/2021/Oct/64
packetstormsecurity	www.packetstormsecurity.com/files/164716/CODESYS-2.4.7.0-Denial-Of-Service.html

Parameter	Position	Path	Description	CWE
username	request body	wbm/php/authentication/login.php	Time/credential-related vulnerability enabling user enumeration and DoS via authentication endpoint.	CWE-755
password	request body	wbm/php/authentication/login.php	Time/credential-related vulnerability enabling user enumeration and DoS via authentication endpoint.	CWE-755

15 Aug 2025 20:25Current

7.5High risk

Vulners AI Score7.5

CVSS 25

CVSS 3.17.5

EPSS0.04305

CWE-755