CVE-2023-1620
published 2023-06-26CVE-2023-1620: Multiple WAGO devices in multiple versions may allow an authenticated remote attacker with high privileges to DoS the device by sending a specifically crafted…
PriorityP425medium4.9CVSS 3.1
AVNACLPRHUINSUCNINAH
EPSS
0.85%
54.1th percentile
Multiple WAGO devices in multiple versions may allow an authenticated remote attacker with high privileges to DoS the device by sending a specifically crafted packet to the CODESYS V2 runtime.
Affected
155 ranges· showing 25
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| wago | 750-331 | FW1 – FW14 | — |
| wago | 750-331_firmware | < fw17 | fw17 |
| wago | 750-332 | FW1 – FW6 | — |
| wago | 750-8202_000-011_firmware | < fw22 | fw22 |
| wago | 750-8202_000-011_firmware | — | — |
| wago | 750-8202_000-012_firmware | < fw22 | fw22 |
| wago | 750-8202_000-012_firmware | — | — |
| wago | 750-8202_000-022_firmware | < fw22 | fw22 |
| wago | 750-8202_000-022_firmware | — | — |
| wago | 750-8202_025-000_firmware | < fw22 | fw22 |
| wago | 750-8202_025-000_firmware | — | — |
| wago | 750-8202_025-001_firmware | < fw22 | fw22 |
| wago | 750-8202_025-001_firmware | — | — |
| wago | 750-8202_025-002_firmware | < fw22 | fw22 |
| wago | 750-8202_025-002_firmware | — | — |
| wago | 750-8202_040-000_firmware | < fw22 | fw22 |
| wago | 750-8202_040-000_firmware | — | — |
| wago | 750-8202_040-001_firmware | < fw22 | fw22 |
| wago | 750-8202_040-001_firmware | — | — |
| wago | 750-8202_firmware | < fw22 | fw22 |
| wago | 750-8202_firmware | — | — |
| wago | 750-8202_xxx-xxx | FW1 – FW22 SP1 | — |
| wago | 750-8203_025-000_firmware | < fw22 | fw22 |
| wago | 750-8203_025-000_firmware | — | — |
| wago | 750-8203_firmware | < fw22 | fw22 |
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
2023-06-26
Published