Wago Controller with CODESYS 2.3 Runtime Denial-of-Service (CVE-2023-1619)

Multiple WAGO devices in multiple versions may allow an authenticated remote attacker with high privileges to DoS the device by sending a malformed packet. This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more information. %NASLMINLEVEL 80900 C...

CVE-2023-1619

Multiple WAGO devices in multiple versions may allow an authenticated remote attacker with high privileges to DoS the device by sending a malformed packet...

CVE-2023-1619

WAGO 750 controllers (CODESYS 2.3 Runtime) are affected by CVE-2023-1619. An authenticated, high-privilege attacker can cause a DoS by sending specially crafted malformed packets due to insufficient input validation. Root cause and details are supported by PT-2023-3435 (insufficient input validat...

Researchers Expose New Severe Flaws in Wago and Schneider Electric OT Products

Three security vulnerabilities have been disclosed in operational technology OT products from Wago and Schneider Electric. The flaws, per Forescout, are part of a broader set of shortcomings collectively called OT:ICEFALL, which now comprises a total of 61 issues spanning 13 different vendors...