Wago: >> 750-889 Firmware Security Vulnerabilities
CODESYS V2 runtime system SP before 2.4.7.55 has a Stack-based Buffer Overflow.
CVSS Score
9.8
EPSS Score
0.006
Published
2021-05-25
CODESYS V2 Web-Server before 1.1.9.20 has a Stack-based Buffer Overflow.
CVSS Score
9.8
EPSS Score
0.006
Published
2021-05-25
CODESYS V2 Web-Server before 1.1.9.20 has Improper Access Control.
CVSS Score
9.8
EPSS Score
0.004
Published
2021-05-25
CODESYS V2 Web-Server before 1.1.9.20 has a a Buffer Copy without Checking the Size of the Input.
CVSS Score
7.5
EPSS Score
0.004
Published
2021-05-25
CODESYS V2 Web-Server before 1.1.9.20 has an Improperly Implemented Security Check.
CVSS Score
9.8
EPSS Score
0.005
Published
2021-05-25
CODESYS V2 Web-Server before 1.1.9.20 has an Out-of-bounds Write.
CVSS Score
9.8
EPSS Score
0.005
Published
2021-05-25
CODESYS V2 Web-Server before 1.1.9.20 has an Out-of-bounds Read.
CVSS Score
9.1
EPSS Score
0.005
Published
2021-05-25
CODESYS V2 runtime system before 2.4.7.55 has Improper Input Validation.
CVSS Score
7.5
EPSS Score
0.004
Published
2021-05-25
CODESYS V2 runtime system SP before 2.4.7.55 has Improper Neutralization of Special Elements used in an OS Command.
CVSS Score
5.3
EPSS Score
0.001
Published
2021-05-25
On WAGO PFC200 devices in different firmware versions with special crafted packets an attacker with network access to the device could cause a denial of service for the login service of the runtime.
CVSS Score
5.3
EPSS Score
0.001
Published
2021-05-24