Wago 750-8214 Firmware vulnerabilities

CVE-2021-30187 [MEDIUM] CWE-78 CVE-2021-30187: CODESYS V2 runtime system SP before 2.4.7.55 has Improper Neutralization of Special Elements used in CODESYS V2 runtime system SP before 2.4.7.55 has Improper Neutralization of Special Elements used in an OS Command.

CVE-2021-21000 [MEDIUM] CWE-770 CVE-2021-21000: On WAGO PFC200 devices in different firmware versions with special crafted packets an attacker with On WAGO PFC200 devices in different firmware versions with special crafted packets an attacker with network access to the device could cause a denial of service for the login service of the runtime.

CVE-2021-21001 [CRITICAL] CWE-22 CVE-2021-21001: On WAGO PFC200 devices in different firmware versions with special crafted packets an authorised att On WAGO PFC200 devices in different firmware versions with special crafted packets an authorised attacker with network access to the device can access the file system with higher privileges.