Wago CODESYS V2 Runtime Toolkit Improper Handling of Exceptional Conditions (CVE-2021-34593)

#%NASL_MIN_LEVEL 80900
##
# (C) Tenable, Inc.
##

include('compat.inc');

if (description)
{
  script_id(503326);
  script_version("1.3");
  script_set_attribute(attribute:"plugin_modification_date", value:"2026/04/21");

  script_cve_id("CVE-2021-34593");
  script_xref(name:"ICSA", value:"26-076-01");

  script_name(english:"Wago CODESYS V2 Runtime Toolkit Improper Handling of Exceptional Conditions (CVE-2021-34593)");

  script_set_attribute(attribute:"synopsis", value:
"The remote OT asset is affected by a vulnerability.");
  script_set_attribute(attribute:"description", value:
"In CODESYS V2 Runtime Toolkit 32 Bit full and PLCWinNT prior to
versions V2.4.7.56 unauthenticated crafted invalid requests may result
in several denial-of-service conditions. Running PLC programs may be
stopped, memory may be leaked, or further communication clients may be
blocked from accessing the PLC.

This plugin only works with Tenable.ot.
Please visit https://www.tenable.com/products/tenable-ot for more information.");
# script_set_attribute(attribute:"see_also", value:"http://www.nessus.org/u?34584988");
# script_set_attribute(attribute:"see_also", value:"http://www.nessus.org/u?9a524497");
  script_set_attribute(attribute:"see_also", value:"http://seclists.org/fulldisclosure/2021/Oct/64");
  script_set_attribute(attribute:"see_also", value:"http://www.nessus.org/u?8d6645bd");
  # https://www.cisa.gov/news-events/ics-advisories/icsa-26-076-01
  script_set_attribute(attribute:"see_also", value:"http://www.nessus.org/u?67b05ae1");
  script_set_attribute(attribute:"solution", value:
"Refer to the vendor advisory.");
  script_set_cvss_base_vector("CVSS2#AV:N/AC:L/Au:N/C:N/I:N/A:P");
  script_set_attribute(attribute:"cvss_score_source", value:"CVE-2021-34593");

  script_set_attribute(attribute:"exploitability_ease", value:"No known exploits are available");
  script_cwe_id(755);

  script_set_attribute(attribute:"vuln_publication_date", value:"2021/10/26");
  script_set_attribute(attribute:"patch_publication_date", value:"2021/10/26");
  script_set_attribute(attribute:"plugin_publication_date", value:"2025/09/09");

  script_set_attribute(attribute:"plugin_type", value:"remote");
  script_set_attribute(attribute:"cpe", value:"cpe:/o:wago:750-8202_firmware");
  script_set_attribute(attribute:"cpe", value:"cpe:/o:wago:750-8203_firmware");
  script_set_attribute(attribute:"cpe", value:"cpe:/o:wago:750-8204_firmware");
  script_set_attribute(attribute:"cpe", value:"cpe:/o:wago:750-8206_firmware");
  script_set_attribute(attribute:"cpe", value:"cpe:/o:wago:750-8207_firmware");
  script_set_attribute(attribute:"cpe", value:"cpe:/o:wago:750-8208_firmware");
  script_set_attribute(attribute:"cpe", value:"cpe:/o:wago:750-8210_firmware");
  script_set_attribute(attribute:"cpe", value:"cpe:/o:wago:750-8211_firmware");
  script_set_attribute(attribute:"cpe", value:"cpe:/o:wago:750-8212_firmware");
  script_set_attribute(attribute:"cpe", value:"cpe:/o:wago:750-8213_firmware");
  script_set_attribute(attribute:"cpe", value:"cpe:/o:wago:750-8214_firmware");
  script_set_attribute(attribute:"cpe", value:"cpe:/o:wago:750-8216_firmware");
  script_set_attribute(attribute:"cpe", value:"cpe:/o:wago:750-8217_firmware");
  script_set_attribute(attribute:"generated_plugin", value:"former");
  script_end_attributes();

  script_category(ACT_GATHER_INFO);
  script_family(english:"Tenable.ot");

  script_copyright(english:"This script is Copyright (C) 2025-2026 and is owned by Tenable, Inc. or an Affiliate thereof.");

  script_dependencies("tenable_ot_api_integration.nasl");
  script_require_keys("Tenable.ot/Wago");

  exit(0);
}


include('tenable_ot_cve_funcs.inc');

get_kb_item_or_exit('Tenable.ot/Wago');

var asset = tenable_ot::assets::get(vendor:'Wago');

var vuln_cpes = {
    "cpe:/o:wago:750-8202_firmware" :
        {"versionEndExcluding" : "fw20", "family" : "ControllerPFC200"},
    "cpe:/o:wago:750-8203_firmware" :
        {"versionEndExcluding" : "fw20", "family" : "ControllerPFC200"},
    "cpe:/o:wago:750-8204_firmware" :
        {"versionEndExcluding" : "fw20", "family" : "ControllerPFC200"},
    "cpe:/o:wago:750-8206_firmware" :
        {"versionEndExcluding" : "fw20", "family" : "ControllerPFC200"},
    "cpe:/o:wago:750-8207_firmware" :
        {"versionEndExcluding" : "fw20", "family" : "ControllerPFC200"},
    "cpe:/o:wago:750-8208_firmware" :
        {"versionEndExcluding" : "fw20", "family" : "ControllerPFC200"},
    "cpe:/o:wago:750-8210_firmware" :
        {"versionEndExcluding" : "fw20", "family" : "ControllerPFC200"},
    "cpe:/o:wago:750-8211_firmware" :
        {"versionEndExcluding" : "fw20", "family" : "ControllerPFC200"},
    "cpe:/o:wago:750-8212_firmware" :
        {"versionEndExcluding" : "fw20", "family" : "ControllerPFC200"},
    "cpe:/o:wago:750-8213_firmware" :
        {"versionEndExcluding" : "fw20", "family" : "ControllerPFC200"},
    "cpe:/o:wago:750-8214_firmware" :
        {"versionEndExcluding" : "fw20", "family" : "ControllerPFC200"},
    "cpe:/o:wago:750-8216_firmware" :
        {"versionEndExcluding" : "fw20", "family" : "ControllerPFC200"},
    "cpe:/o:wago:750-8217_firmware" :
        {"versionEndExcluding" : "fw20", "family" : "ControllerPFC200"}
};

tenable_ot::cve::compare_and_report(asset:asset, cpes:vuln_cpes, severity:SECURITY_WARNING);