QwikSec

Security Database

CVE

CWE

Training

CVE-2023-1619

Published: Jun 26, 2023

Modified: Oct 2, 2024

PUBLISHED

CVSS v3.1

4.9

MEDIUM

Description

Multiple WAGO devices in multiple versions may allow an authenticated remote attacker with high privileges to DoS the device by sending a malformed packet.

Vendor	Product	Versions
Wago	750-8202/xxx-xxx	affected `FW1 - <= FW22 SP1`
Wago	750-8203/xxx-xxx	affected `FW1 - <= FW22 SP1`
Wago	750-8204/xxx-xxx	affected `FW1 - <= FW22 SP1`
Wago	750-8206/xxx-xxx	affected `FW1 - <= FW22 SP1`
Wago	750-8207/xxx-xxx	affected `FW1 - <= FW22 SP1`
Wago	750-8208/xxx-xxx	affected `FW1 - <= FW22 SP1`
Wago	750-8210/xxx-xxx	affected `FW1 - <= FW22 SP1`
Wago	750-8211/xxx-xxx	affected `FW1 - <= FW22 SP1`
Wago	750-8212/xxx-xxx	affected `FW1 - <= FW22 SP1`
Wago	750-8213/xxx-xxx	affected `FW1 - <= FW22 SP1`
Wago	750-8214/xxx-xxx	affected `FW1 - <= FW22 SP1`
Wago	750-8216/xxx-xxx	affected `FW1 - <= FW22 SP1`
Wago	750-8217/xxx-xxx	affected `FW1 - <= FW22 SP1`
Wago	750-823	affected `FW1 - <= FW10`
Wago	750-332	affected `FW1 - <= FW6`
Wago	750-832/xxx-xxx	affected `FW1 - <= FW6`
Wago	750-862	affected `FW1 - <= FW10`
Wago	750-890/xxx-xxx	affected `FW1 - <= FW10`
Wago	750-891	affected `FW1 - <= FW10`
Wago	750-893	affected `FW1 - <= FW10`
Wago	750-331	affected `FW1 - <= FW14`
Wago	750-829	affected `FW1 - <= FW14`
Wago	750-831/xxx-xxx	affected `FW1 - <= FW14`
Wago	750-852	affected `FW1 - <= FW16`
Wago	750-880/xxx-xxx	affected `FW1 - <= FW16`
Wago	750-881	affected `FW1 - <= FW16`
Wago	750-882	affected `FW1 - <= FW16`
Wago	750-885/xxx-xxx	affected `FW1 - <= FW16`
Wago	750-889	affected `FW1 - <= FW16`

Weaknesses (CWE)

CVSS v3.1 Details

CVSS v3.1 Vector

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H

Attack Vector

Network

Attack Complexity

Low

Privileges Required

High

User Interaction

None

Scope

Unchanged

Confidentiality

None

Integrity

None

Availability

High

References

https://cert.vde.com/en/advisories/VDE-2023-006/

vendor-advisory

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.