Lucene search
+L

996 matches found

Cvelist
Cvelist
added 2023/06/26 6:19 a.m.35 views

CVE-2023-1620 WAGO: DoS in multiple products in multiple versions using Codesys

Multiple WAGO devices in multiple versions may allow an authenticated remote attacker with high privileges to DoS the device by sending a specifically crafted packet to the CODESYS V2 runtime...

4.9CVSS5.3AI score0.0085EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2023/06/26 6:18 a.m.32 views

CVE-2023-1619 WAGO: DoS in multiple versions of multiple products

Multiple WAGO devices in multiple versions may allow an authenticated remote attacker with high privileges to DoS the device by sending a malformed packet...

4.9CVSS5.3AI score0.00787EPSS
SaveExploits0References1
CVE
CVE
added 2023/06/26 6:18 a.m.73 views

CVE-2023-1619

WAGO 750 controllers (CODESYS 2.3 Runtime) are affected by CVE-2023-1619. An authenticated, high-privilege attacker can cause a DoS by sending specially crafted malformed packets due to insufficient input validation. Root cause and details are supported by PT-2023-3435 (insufficient input validat...

4.9CVSS5.1AI score0.00787EPSS
SaveExploits0References1Affected Software1
CNNVD
CNNVD
added 2023/06/26 12:00 a.m.10 views

WAGO 输入验证错误漏洞

WAGO is a 750-88x series programmable logic controller from WAGO, Germany. The device is designed for use in industrial environments where digital algorithms operate electronic systems. An input validation error vulnerability exists in the WAGO PFC200 Family, which can be exploited by an...

4.9CVSS5.8AI score0.0085EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2023/06/26 12:00 a.m.9 views

WAGO 输入验证错误漏洞

WAGO is a 750-88x series programmable logic controller from WAGO, Germany. The device is designed for use in industrial environments where digital algorithms operate electronic systems. An input validation error vulnerability exists in the WAGO PFC200 Family, which can be exploited by an...

4.9CVSS5.8AI score0.00787EPSS
SaveExploits0References2
The Hacker News
The Hacker News
added 2023/06/20 7:08 p.m.45 views

Researchers Expose New Severe Flaws in Wago and Schneider Electric OT Products

Three security vulnerabilities have been disclosed in operational technology OT products from Wago and Schneider Electric. The flaws, per Forescout, are part of a broader set of shortcomings collectively called OT:ICEFALL, which now comprises a total of 61 issues spanning 13 different vendors...

9.8CVSS10AI score0.0085EPSS
SaveExploits0
The Hacker News
The Hacker News
added 2023/06/20 7:08 p.m.19 views

Researchers Expose New Severe Flaws in Wago and Schneider Electric OT Products

Three security vulnerabilities have been disclosed in operational technology OT products from Wago and Schneider Electric. The flaws, per Forescout, are part of a broader set of shortcomings collectively called OT:ICEFALL , which now comprises a total of 61 issues spanning 13 different vendors...

9.8CVSS7.1AI score0.0085EPSS
SaveExploits0
Positive Technologies
Positive Technologies
added 2023/06/20 12:00 a.m.12 views

PT-2023-3435 · Wago · Wago

Name of the Vulnerable Software and Affected Versions: WAGO devices affected versions not specified Description: The issue is related to insufficient input validation in the software of WAGO programmable logic controllers, which may allow an authenticated remote attacker with high privileges to...

6.1CVSS6.8AI score0.00787EPSS
SaveExploits0References5
Positive Technologies
Positive Technologies
added 2023/06/20 12:00 a.m.10 views

PT-2023-3455 · Wago · Wago 750

Name of the Vulnerable Software and Affected Versions: WAGO 750 versions affected versions not specified Description: The issue is related to insufficient input validation in the software of WAGO 750 programmable logic controllers. It may allow a remote attacker to cause a denial of service using...

6.1CVSS6.7AI score0.0085EPSS
SaveExploits0References5
Positive Technologies
Positive Technologies
added 2023/06/14 12:00 a.m.13 views

PT-2023-3836 · Wago · Wago 750-3X/-8X

Name of the Vulnerable Software and Affected Versions: WAGO 750-3x/-8x products affected versions not specified Description: The issue is related to uncontrolled resource consumption in the mentioned products, which may allow an unauthenticated remote attacker to cause a denial of service DoS of...

7.8CVSS6.9AI score0.00933EPSS
SaveExploits0References5
BDU FSTEC
BDU FSTEC
added 2023/06/07 12:00 a.m.15 views

The vulnerability of the microprogramming software for WAGO CC100 programmable logic controllers and the microprogramming software for WAGO Touch Panel 600 sensors is related to insufficient verification of input data.

The vulnerability of the microprogramming software used in WAGO CC100 programmable logic controllers and the microprogramming software for WAGO Touch Panel 600 sensors is related to insufficient verification of input data. Exploiting this vulnerability can allow an attacker to gain access to...

10CVSS7.7AI score0.82037EPSS
SaveExploits5References3
Tenable Nessus
Tenable Nessus
added 2023/06/01 12:00 a.m.29 views

Wago Unauthenticated command execution via Web-based-management (CVE-2023-1698)

In multiple products of WAGO a vulnerability allows an unauthenticated, remote attacker to create new users and change the device configuration which can result in unintended behaviour, Denial of Service and full system compromise. This plugin only works with Tenable.ot. Please visit...

9.8CVSS8.3AI score0.82037EPSS
SaveExploits5References2
CNNVD
CNNVD
added 2023/05/28 12:00 a.m.8 views

wago 750-8xx 资源管理错误漏洞

WAGO wago 750-8xx is a series of programmable logic controllers from the German company WAGO WAGO. The devices are specifically designed for use in industrial environments where digital computing operates electronic systems. A resource management error vulnerability exists in the WAGO 750-3x/-8x...

7.5CVSS7.3AI score0.00933EPSS
SaveExploits0References2
OSV
OSV
added 2023/05/15 9:15 a.m.10 views

CVE-2023-1698

In multiple products of WAGO a vulnerability allows an unauthenticated, remote attacker to create new users and change the device configuration which can result in unintended behaviour, Denial of Service and full system compromise...

9.8CVSS7.3AI score0.82037EPSS
SaveExploits5References1
NVD
NVD
added 2023/05/15 9:15 a.m.30 views

CVE-2023-1698

In multiple products of WAGO a vulnerability allows an unauthenticated, remote attacker to create new users and change the device configuration which can result in unintended behaviour, Denial of Service and full system compromise...

9.8CVSS9.4AI score0.82037EPSS
SaveExploits5References1
Prion
Prion
added 2023/05/15 9:15 a.m.18 views

Design/Logic Flaw

In multiple products of WAGO a vulnerability allows an unauthenticated, remote attacker to create new users and change the device configuration which can result in unintended behaviour, Denial of Service and full system compromise...

7.5CVSS9.3AI score0.82037EPSS
SaveExploits5References1Affected Software7
Vulnrichment
Vulnrichment
added 2023/05/15 8:51 a.m.14 views

CVE-2023-1698 WAGO: WBM Command Injection in multiple products

In multiple products of WAGO a vulnerability allows an unauthenticated, remote attacker to create new users and change the device configuration which can result in unintended behaviour, Denial of Service and full system compromise...

9.8CVSS9.3AI score0.82037EPSS
SaveExploits5References1
Cvelist
Cvelist
added 2023/05/15 8:51 a.m.50 views

CVE-2023-1698 WAGO: WBM Command Injection in multiple products

In multiple products of WAGO a vulnerability allows an unauthenticated, remote attacker to create new users and change the device configuration which can result in unintended behaviour, Denial of Service and full system compromise...

9.8CVSS9.6AI score0.82037EPSS
SaveExploits5References1
CVE
CVE
added 2023/05/15 8:51 a.m.157 views

CVE-2023-1698

CVE-2023-1698 refers to a remote, unauthenticated command-execution vulnerability in multiple WAGO products that use Web-based management. The issue permits an attacker to create new users and alter device configuration, potentially resulting in unintended behavior, Denial of Service, and full sy...

9.8CVSS9.4AI score0.82037EPSS
SaveIn wildExploits5References1Affected Software1
CNNVD
CNNVD
added 2023/05/15 12:00 a.m.12 views

多款WAGO产品操作系统命令注入漏洞

WAGO PFC100 is a programmable logic controller PLC.WAGO Compact Controller CC100 is a compact controller.WAGO Edge Controller is an edge controller.WAGO Compact Controller CC100 is a programmable logic controller PLC.WAGO Edge Controller is an edge controller.WAGO Compact Controller CC100 is a...

9.8CVSS8.9AI score0.82037EPSS
SaveExploits5References2
Rows per page
Query Builder