cbcvebase.
CVE-2021-34566
published 2022-11-09

CVE-2021-34566: In WAGO I/O-Check Service in multiple products an unauthenticated remote attacker can send a specially crafted packet containing OS commands to crash the…

PriorityP260critical9.1CVSS 3.1
AVNACLPRNUINSUCNIHAH
EPSS
1.15%
66.7th percentile
In WAGO I/O-Check Service in multiple products an unauthenticated remote attacker can send a specially crafted packet containing OS commands to crash the iocheck process and write memory resulting in loss of integrity and DoS.

Affected

104 ranges· showing 25
VendorProductVersion rangeFixed in
wago750-8100_firmware< 1818
wago750-8100_firmware——
wago750-8101_025-000_firmware< 1818
wago750-8101_025-000_firmware——
wago750-8101_firmware< 1818
wago750-8101_firmware——
wago750-8102_025-000_firmware< 1818
wago750-8102_025-000_firmware——
wago750-8102_firmware< 1818
wago750-8102_firmware——
wago750-81xx_xxx-xxxfwFW1 – FW18 Patch 2—
wago750-8202_000-011_firmware< 1818
wago750-8202_000-011_firmware——
wago750-8202_000-012_firmware< 1818
wago750-8202_000-012_firmware——
wago750-8202_000-022_firmware< 1818
wago750-8202_000-022_firmware——
wago750-8202_025-000_firmware< 1818
wago750-8202_025-000_firmware——
wago750-8202_025-001_firmware< 1818
wago750-8202_025-001_firmware——
wago750-8202_025-002_firmware< 1818
wago750-8202_025-002_firmware——
wago750-8202_040-000_firmware< 1818
wago750-8202_040-000_firmware——
Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.