CVE-2021-34569

CRITICAL

9.8

Description

In WAGO I/O-Check Service in multiple products an attacker can send a specially crafted packet containing OS commands to crash the diagnostic tool and write memory.

Details CVE

Score CVSS v3.19.8

SeveriteCRITICAL

Vecteur CVSSCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Vecteur d'attaqueNETWORK

ComplexiteLOW

Privileges requisNONE

Interaction utilisateurNONE

Publie11/9/2022

Derniere modification11/21/2024

Sourcenvd

Observations honeypot0

Produits affectes

wago:750-8100wago:750-8100_firmwarewago:750-8101wago:750-8101\/025-000wago:750-8101\/025-000_firmwarewago:750-8101_firmwarewago:750-8102wago:750-8102\/025-000wago:750-8102\/025-000_firmwarewago:750-8102_firmwarewago:750-8202wago:750-8202\/000-011wago:750-8202\/000-011_firmwarewago:750-8202\/000-012wago:750-8202\/000-012_firmwarewago:750-8202\/000-022wago:750-8202\/000-022_firmwarewago:750-8202\/025-000wago:750-8202\/025-000_firmwarewago:750-8202\/025-001wago:750-8202\/025-001_firmwarewago:750-8202\/025-002wago:750-8202\/025-002_firmwarewago:750-8202\/040-000wago:750-8202\/040-000_firmwarewago:750-8202\/040-001wago:750-8202\/040-001_firmwarewago:750-8202_firmwarewago:752-8303\/8000-002wago:752-8303\/8000-002_firmwarewago:762-4101wago:762-4101_firmwarewago:762-4102wago:762-4102_firmwarewago:762-4103wago:762-4103_firmwarewago:762-4104wago:762-4104_firmwarewago:762-4201\/8000-001wago:762-4201\/8000-001_firmwarewago:762-4202\/8000-001wago:762-4202\/8000-001_firmwarewago:762-4203\/8000-001wago:762-4203\/8000-001_firmwarewago:762-4204\/8000-001wago:762-4204\/8000-001_firmwarewago:762-4205\/8000-001wago:762-4205\/8000-001_firmwarewago:762-4205\/8000-002wago:762-4205\/8000-002_firmwarewago:762-4206\/8000-001wago:762-4206\/8000-001_firmwarewago:762-4206\/8000-002wago:762-4206\/8000-002_firmwarewago:762-4301\/8000-002wago:762-4301\/8000-002_firmwarewago:762-4302\/8000-002wago:762-4302\/8000-002_firmwarewago:762-4303\/8000-002wago:762-4303\/8000-002_firmwarewago:762-4304\/8000-002wago:762-4304\/8000-002_firmwarewago:762-4305\/8000-002wago:762-4305\/8000-002_firmwarewago:762-4306\/8000-002wago:762-4306\/8000-002_firmwarewago:762-5203\/8000-001wago:762-5203\/8000-001_firmwarewago:762-5204\/8000-001wago:762-5204\/8000-001_firmwarewago:762-5205\/8000-001wago:762-5205\/8000-001_firmwarewago:762-5206\/8000-001wago:762-5206\/8000-001_firmwarewago:762-5303\/8000-002wago:762-5303\/8000-002_firmwarewago:762-5304\/8000-002wago:762-5304\/8000-002_firmwarewago:762-5305\/8000-002wago:762-5305\/8000-002_firmwarewago:762-5306\/8000-002wago:762-5306\/8000-002_firmwarewago:762-6201\/8000-001wago:762-6201\/8000-001_firmwarewago:762-6202\/8000-001wago:762-6202\/8000-001_firmwarewago:762-6203\/8000-001wago:762-6203\/8000-001_firmwarewago:762-6204\/8000-001wago:762-6204\/8000-001_firmwarewago:762-6301\/8000-002wago:762-6301\/8000-002_firmwarewago:762-6302\/8000-002wago:762-6302\/8000-002_firmwarewago:762-6303\/8000-002wago:762-6303\/8000-002_firmwarewago:762-6304\/8000-002wago:762-6304\/8000-002_firmware

Faiblesses (CWE)

CWE-787

References

https://cert.vde.com/en/advisories/VDE-2020-036/(info@cert.vde.com)

https://cert.vde.com/en/advisories/VDE-2020-036/(af854a3a-2127-422b-91ae-364da2661108)

Correlations IOC

Aucune correlation enregistree

This product uses data from the NVD API but is not endorsed or certified by the NVD.