Wago I/O-Check Service Out-of-bounds Write (CVE-2021-34569)

In WAGO I/O-Check Service in multiple products an attacker can send a specially crafted packet containing OS commands to crash the diagnostic tool and write memory. This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more information. %NASLMINLEVEL...

CVE-2021-34569

CVE-2021-34569 affects WAGO PFC diagnostic tools (WAGO I/O-Check Service). The vulnerability is an out-of-bounds write in the diagnostic tool caused by processing a crafted network packet, enabling memory write and crash of the tool. Exploitation is network-based with no authentication or user in...

Several New Critical Flaws Affect CODESYS Industrial Automation Software

Cybersecurity researchers on Wednesday disclosed multiple security vulnerabilities impacting CODESYS automation software and the WAGO programmable logic controller PLC platform that could be remotely exploited to take control of a company's cloud operational technology OT infrastructure. The flaw...