CVE-2023-1620

Summary

Multiple WAGO devices in multiple versions may allow an authenticated remote attacker with high privileges to DoS the device by sending a specifically crafted packet to the CODESYS V2 runtime.

Affected Software

VendorProductVersion RangeStatus
Wago750-8202/xxx-xxxFW1 <= FW22 SP1affected
Wago750-8203/xxx-xxxFW1 <= FW22 SP1affected
Wago750-8204/xxx-xxxFW1 <= FW22 SP1affected
Wago750-8206/xxx-xxxFW1 <= FW22 SP1affected
Wago750-8207/xxx-xxxFW1 <= FW22 SP1affected
Wago750-8208/xxx-xxxFW1 <= FW22 SP1affected
Wago750-8210/xxx-xxxFW1 <= FW22 SP1affected
Wago750-8211/xxx-xxxFW1 <= FW22 SP1affected
Wago750-8212/xxx-xxxFW1 <= FW22 SP1affected
Wago750-8213/xxx-xxxFW1 <= FW22 SP1affected
Wago750-8214/xxx-xxxFW1 <= FW22 SP1affected
Wago750-8216/xxx-xxxFW1 <= FW22 SP1affected
Wago750-8217/xxx-xxxFW1 <= FW22 SP1affected
Wago750-823FW1 <= FW10affected
Wago750-332FW1 <= FW6affected
Wago750-832/xxx-xxxFW1 <= FW6affected
Wago750-862FW1 <= FW10affected
Wago750-890/xxx-xxxFW1 <= FW10affected
Wago750-891FW1 <= FW10affected
Wago750-893FW1 <= FW10affected
Wago750-331FW1 <= FW14affected
Wago750-829FW1 <= FW14affected
Wago750-831/xxx-xxxFW1 <= FW14affected
Wago750-852FW1 <= FW16affected
Wago750-880/xxx-xxxFW1 <= FW16affected
Wago750-881FW1 <= FW16affected
Wago750-882FW1 <= FW16affected
Wago750-885/xxx-xxxFW1 <= FW16affected
Wago750-889FW1 <= FW16affected

Weaknesses

  • CWE-1288: CWE-1288 Improper Validation of Consistency within Input

ADP Enrichment

CVE Program Container

Additional References

CISA ADP Vulnrichment

  • SSVC:
  • Exploitation: none
    • Automatable: no
    • Technical Impact: partial

References