Lucene search

[email protected]CVE-2023-1620

HistoryJun 26, 2023 - 7:15 a.m.

CVE-2023-1620

2023-06-2607:15:09

CWE-20

[email protected]

web.nvd.nist.gov

wago

authenticated remote attacker

dos

codesys v2 runtime

cve-2023-1620

nvd

4.9 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

HIGH

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H

5.1 Medium

AI Score

Confidence

High

3.3 Low

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

MULTIPLE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:M/C:N/I:N/A:P

0.001 Low

EPSS

Percentile

30.2%

JSON

Multiple WAGO devices in multiple versions may allow an authenticated remote attacker with high privileges to DoS the device by sending a specifically crafted packet to the CODESYS V2 runtime.

CPENameOperatorVersion
wago:750-331_firmwarewago 750-331 firmwareltfw17
wago:750-331_firmwarewago 750-331 firmwareeqfw10
wago:750-331_firmwarewago 750-331 firmwareeqfw1

CPE	Name	Operator	Version
wago:750-331_firmware	wago 750-331 firmware	lt	fw17
wago:750-331_firmware	wago 750-331 firmware	eq	fw10
wago:750-331_firmware	wago 750-331 firmware	eq	fw1

References

cert.vde.com/en/advisories/VDE-2023-006/

4.9 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

HIGH

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H

5.1 Medium

AI Score

Confidence

High

3.3 Low

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

MULTIPLE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:M/C:N/I:N/A:P

0.001 Low

EPSS

Percentile

30.2%

JSON

Related for CVE-2023-1620

prion1 nessus1 cvelist1 thn1