CVE-2024-12650
Medium
Description
An attacker with low privileges can manipulate the requested memory size, causing the application to use an invalid memory area. This could lead to a crash of the application but it does not affected other applications.
SeverityMedium
CVSS5.4
Exploit probability—
ProductCC100 0751-9x01
PublishedMar 5, 2025
First seenMar 5, 2025
Weakness typeCWE-252CWE-252
How to fix
Update
- WAGO CC100 0751-9x0104.07.01 or later
- WAGO Edge Controller 0752-8303/8000-000204.07.01 or later
- WAGO PFC100 G1 0750-810x/xxxx-xxxx3.10.11, 04.07.01 or later
- WAGO PFC100 G2 0750-811x-xxxx-xxxx04.07.01 or later
- WAGO PFC200 G1 750-820x-xxx-xxx3.10.11, 04.07.01 or later
- WAGO PFC200 G2 750-821x-xxx-xxx04.07.01 or later
- WAGO TP600 0762-420x/8000-000x04.07.01 or later
- WAGO TP600 0762-430x/8000-000x04.07.01 or later
- WAGO TP600 0762-520x/8000-000x04.07.01 or later
- WAGO TP600 0762-530x/8000-000x04.07.01 or later
- WAGO TP600 0762-620x/8000-000x04.07.01 or later
- WAGO TP600 0762-630x/8000-000x04.07.01 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| WAGO CC100 0751-9x01 | v < 04.07.01 | 04.07.01 |
| WAGO Edge Controller 0752-8303/8000-0002 | v < 04.07.01 | 04.07.01 |
| WAGO PFC100 G1 0750-810x/xxxx-xxxx | v < 3.10.11, v < 04.07.01 | 3.10.11, 04.07.01 |
| WAGO PFC100 G2 0750-811x-xxxx-xxxx | v < 04.07.01 | 04.07.01 |
| WAGO PFC200 G1 750-820x-xxx-xxx | v < 3.10.11, v < 04.07.01 | 3.10.11, 04.07.01 |
| WAGO PFC200 G2 750-821x-xxx-xxx | v < 04.07.01 | 04.07.01 |
| WAGO TP600 0762-420x/8000-000x | v < 04.07.01 | 04.07.01 |
| WAGO TP600 0762-430x/8000-000x | v < 04.07.01 | 04.07.01 |
| WAGO TP600 0762-520x/8000-000x | v < 04.07.01 | 04.07.01 |
| WAGO TP600 0762-530x/8000-000x | v < 04.07.01 | 04.07.01 |
| WAGO TP600 0762-620x/8000-000x | v < 04.07.01 | 04.07.01 |
| WAGO TP600 0762-630x/8000-000x | v < 04.07.01 | 04.07.01 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.