CVE-2023-1620

Medium

Description

Multiple WAGO devices in multiple versions may allow an authenticated remote attacker with high privileges to DoS the device by sending a specifically crafted packet to the CODESYS V2 runtime.

SeverityMedium
CVSS4.9
Exploit probability—
ProductWago 750-331 Firmware
PublishedJun 26, 2023
First seenJun 26, 2023
Weakness typeCWE-1288CWE-1288

How to fix

Update
  • wago 750-331_firmwarefw17 or later
  • wago 750-8202_firmwarefw22 or later
  • wago 750-8202\/000-011_firmwarefw22 or later
  • wago 750-8202\/000-012_firmwarefw22 or later
  • wago 750-8202\/000-022_firmwarefw22 or later
  • wago 750-8202\/025-000_firmwarefw22 or later
  • wago 750-8202\/025-001_firmwarefw22 or later
  • wago 750-8202\/025-002_firmwarefw22 or later
  • wago 750-8202\/040-000_firmwarefw22 or later
  • wago 750-8202\/040-001_firmwarefw22 or later
  • wago 750-8203_firmwarefw22 or later
  • wago 750-8203\/025-000_firmwarefw22 or later

Affected products

ProductAffected versionsFixed in
wago 750-331_firmwarev < fw17fw17
wago 750-8202_firmwarev < fw22, fw22fw22
wago 750-8202\/000-011_firmwarev < fw22, fw22fw22
wago 750-8202\/000-012_firmwarev < fw22, fw22fw22
wago 750-8202\/000-022_firmwarev < fw22, fw22fw22
wago 750-8202\/025-000_firmwarev < fw22, fw22fw22
wago 750-8202\/025-001_firmwarev < fw22, fw22fw22
wago 750-8202\/025-002_firmwarev < fw22, fw22fw22
wago 750-8202\/040-000_firmwarev < fw22, fw22fw22
wago 750-8202\/040-001_firmwarev < fw22, fw22fw22
wago 750-8203_firmwarev < fw22, fw22fw22
wago 750-8203\/025-000_firmwarev < fw22, fw22fw22
wago 750-8204_firmwarev < fw22, fw22fw22
wago 750-8204\/025-000_firmwarev < fw22, fw22fw22
wago 750-8206_firmwarev < fw22, fw22fw22
wago 750-8206\/025-000_firmwarev < fw22, fw22fw22
wago 750-8206\/025-001_firmwarev < fw22, fw22fw22
wago 750-8206\/040-000_firmwarev < fw22, fw22fw22
wago 750-8206\/040-001_firmwarev < fw22, fw22fw22
wago 750-8207_firmwarev < fw22, fw22fw22
wago 750-8207\/025-000_firmwarev < fw22, fw22fw22
wago 750-8207\/025-001_firmwarev < fw22, fw22fw22
wago 750-8208_firmwarev < fw22, fw22fw22
wago 750-8208\/025-000_firmwarev < fw22, fw22fw22
wago 750-8208\/025-001_firmwarev < fw22, fw22fw22
wago 750-8210_firmwarev < fw22, fw22fw22
wago 750-8210\/025-000_firmwarev < fw22, fw22fw22
wago 750-8210\/040-000_firmwarev < fw22, fw22fw22
wago 750-8211_firmwarev < fw22, fw22fw22
wago 750-8211\/040-000_firmwarev < fw22, fw22fw22
wago 750-8211\/040-001_firmwarev < fw22, fw22fw22
wago 750-8212_firmwarev < fw22, fw22fw22
wago 750-8212\/000-100_firmwarev < fw22, fw22fw22
wago 750-8212\/025-000_firmwarev < fw22, fw22fw22
wago 750-8212\/025-001_firmwarev < fw22, fw22fw22
wago 750-8212\/025-002_firmwarev < fw22, fw22fw22
wago 750-8212\/040-000_firmwarev < fw22, fw22fw22
wago 750-8212\/040-001_firmwarev < fw22, fw22fw22
wago 750-8212\/040-010_firmwarev < fw22, fw22fw22
wago 750-8213_firmwarev < fw22, fw22fw22
wago 750-8213\/040-010_firmwarev < fw22, fw22fw22
wago 750-8214_firmwarev < fw22, fw22fw22
wago 750-8215_firmwarev < fw22, fw22fw22
wago 750-8216_firmwarev < fw22, fw22fw22
wago 750-8216\/025-000_firmwarev < fw22, fw22fw22
wago 750-8216\/025-001_firmwarev < fw22, fw22fw22
wago 750-8216\/040-000_firmwarev < fw22, fw22fw22
wago 750-8217_firmwarev < fw22, fw22fw22
wago 750-8217\/025-000_firmwarev < fw22, fw22fw22
wago 750-8217\/600-000_firmwarev < fw22, fw22fw22
wago 750-8217\/625-000_firmwarev < fw22, fw22fw22
wago 750-823_firmwarev < fw11fw11
wago 750-829_firmwarev < fw17fw17
wago 750-831_firmwarev < fw17fw17
wago 750-831\/000-002_firmwarev < fw17fw17
wago 750-832_firmwarev < fw11fw11
wago 750-832\/000-002_firmwarev < fw11fw11
wago 750-852_firmwarev < fw17fw17
wago 750-862_firmwarev < fw11fw11
wago 750-880_firmwarev < fw17fw17
wago 750-880\/025-000_firmwarev < fw17fw17
wago 750-880\/025-001_firmwarev < fw17fw17
wago 750-880\/025-002_firmwarev < fw17fw17
wago 750-880\/040-000_firmwarev < fw17fw17
wago 750-881_firmwarev < fw17fw17
wago 750-882_firmwarev < fw17fw17
wago 750-885_firmwarev < fw17fw17
wago 750-885\/025-000_firmwarev < fw17fw17
wago 750-889_firmwarev < fw17fw17
wago 750-890_firmwarev < fw11fw11
wago 750-890\/025-000_firmwarev < fw11fw11
wago 750-890\/025-001_firmwarev < fw11fw11
wago 750-890\/025-002_firmwarev < fw11fw11
wago 750-890\/040-000_firmwarev < fw11fw11
wago 750-891_firmwarev < fw11fw11
wago 750-893_firmwarev < fw11fw11

Check your version

Choose the product and enter the version you run to see whether it falls in the affected range.

In the Intelligence 360 plan

Attack Surface Management

See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.