Most recent entries from csaf_wagogmbhcokg

VDE-2019-013 — WAGO: Multiple Vulnerabilities in industrial managed switches

Wed, 12 Jun 2019 10:25:00 +0000

Multiple vulnerabilities have been identified in WAGO 852-303, 852-1305 and 852-1505 industrial managed ethernet switches.

VDE-2019-022 — WAGO: Multiple Vulnerabilities in I/O-Check Service in Multiple Devices

Mon, 16 Dec 2019 09:00:00 +0000

The reported vulnerabilities allow a remote attacker to change the setting, delete the application, set the device to factory defaults, code execution and to cause a system crash or denial of service.

Note(s)

The following products are affected by the listed vulnerabilities:

Series PFC100 (750-81xx/xxx-xxx) Series PFC200 (750-82xx/xxx-xxx)

The following products are affected by the vulnerability CVE-2019-5078

750-852, 750-831/xxx-xxx, 750-881, 750-880/xxx-xxx, 750-889

750-823, 750-832/xxx-xxx, 750-862, 750-890/xxx-xxx, 750-891

VDE-2020-007 — WAGO: Web-Based Management Denial of Service

Mon, 09 Mar 2020 09:10:00 +0000

The Web-Based Management (WBM) of WAGOs programmable logic controller (PLC) is typically used for commissioning and update. The controller is an embedded device which has limited resources. The vulnerability described here takes advantage of this fact.With special crafted requests it is possible to have a denial of service of the WBM.

VDE-2020-010 — WAGO: Cloud Connectivity Remote Code Execution Vulnerability

Mon, 09 Mar 2020 09:25:00 +0000

An attacker needs an authorized login with administrative privileges on the device in order to exploit the herein mentioned vulnerability. The weakness allows an attacker which has admin privileges on the device to redirect to his own Azure cloud account and install malicious software with the firmware update functionality.

VDE-2020-015 — WAGO: Web Based Management - Code Execution Vulnerability

Wed, 10 Jun 2020 08:00:00 +0000

The Web-Based Management (WBM) of WAGOs programmable logic controller (PLC) is typically used for administration, commissioning and updates.

An attacker needs an authorized login with administrative privileges on the device in order to exploit the herein mentioned vulnerability.

An authenticated attacker who has access to the Web Based Management (WBM) could use the software upload functionality to install software package with root privileges. This fact could be potentially used to manipulate the device or to get control of the device.

VDE-2020-048 — M&M Software (WAGO): Deserialisation of untrusted data in fdtContainer

Thu, 14 Jan 2021 14:57:00 +0000

The fdtCONTAINER component is integrated into an application (host application). The fdtCONTAINER application is a specific host application which integrates the fdtCONTAINER component.

The fdtCONTAINER component exchanges binary data blobs with such a host application. Typically, the host application saves these binary data blobs into a project storage (project file or a project database).

To manipulate the data inside the project storage, the attacker needs write access to this project storage. Additionally, the manipulated project needs to be opened by the host application. It depends on the host application whether opening the project requires a user action or not. In fdtCONTAINER applications, the user has to open the manipulated project file manually.

In the case of opening a stored project, the deserialization of the manipulated data can be exploited.

VDE-2021-050 — WAGO: Multiple devices affected by Vulnerabilities in NUCLEUS TCP Stack.

Tue, 16 Nov 2021 11:02:00 +0000

Multiple vulnerabilities were reported in the Nucleus Real-Time Operating System (RTOS). The Nucleus RTOS is an essential component in several WAGO PLCs and fieldbus coupler. WAGO uses older Versions of the Nucleus RTOS also in legacy products. For additional information please consult the official Siemens advisory: • Advisory SSA-044112

VDE-2022-004 — WAGO: Web-Based Management Cross-Site Scripting

Wed, 09 Mar 2022 07:00:00 +0000

The Web-Based Management (WBM) of WAGOs programmable logic controller (PLC) is typically used for administration, commissioning and updates.Various configuration pages of the device are vulnerable to reflected XSS (Cross-Site Scripting) attacks.

VDE-2022-031 — WAGO: Multiple Products Series affected by multiple CODESYS vulnerabilities

Wed, 17 Aug 2022 08:00:00 +0000

Multiple WAGO product families are prone to multiple vulnerabilities affecting CODESYS control runtime system.

VDE-2022-035 — WAGO: Multiple product series affected by multiple CODESYS vulnerabilities

Wed, 17 Aug 2022 08:00:00 +0000

Multiple WAGO product families are prone to multiple vulnerabilities affecting CODESYS control runtime system.