CVE-2021-34568 | ByteOS Network

Vulnerability Details :

CVE-2021-34568

Assigner-CERTVDE

Assigner Org ID-270ccfa6-a436-4e77-922e-914ec3a9685c

Published At-09 Nov, 2022 | 15:17

Updated At-01 May, 2025 | 14:20

WAGO I/O-Check Service prone to Allocation of Resources Without Limits or Throttling

In WAGO I/O-Check Service in multiple products an unauthenticated remote attacker can send a specially crafted packet containing OS commands to provoke a denial of service.

EPSS History

Score

Latest Score

-

N/A

Percentile

Latest Percentile

-

N/A

▼Common Vulnerabilities and Exposures (CVE)

Assigner:CERTVDE

Assigner Org ID:270ccfa6-a436-4e77-922e-914ec3a9685c

Published At:09 Nov, 2022 | 15:17

Updated At:01 May, 2025 | 14:20

▼CVE Numbering Authority (CNA)

WAGO I/O-Check Service prone to Allocation of Resources Without Limits or Throttling

In WAGO I/O-Check Service in multiple products an unauthenticated remote attacker can send a specially crafted packet containing OS commands to provoke a denial of service.

Affected Products

Vendor

Product

750-81xx/xxx-xxxFW

Default Status

unaffected

Versions

Affected

From FW1 through FW18 Patch 2 (custom)

Vendor

Product

750-82xx/xxx-xxx

Default Status

unaffected

Versions

Affected

From FW1 through FW18 Patch 2 (custom)

Vendor

Product

752-8303/8000-0002

Default Status

unaffected

Versions

Affected

From FW1 through FW18 Patch 2 (custom)

Vendor

Product

Default Status

unaffected

Versions

Affected

From FW1 through FW18 Patch 2 (custom)

Vendor

Product

Default Status

unaffected

Versions

Affected

From FW1 through FW18 Patch 2 (custom)

Vendor

Product

Default Status

unaffected

Versions

Affected

From FW1 through FW18 Patch 2 (custom)

Problem Types

Type	CWE ID	Description
CWE	CWE-770	CWE-770 Allocation of Resources Without Limits or Throttling

Type: CWE

CWE ID: CWE-770

Description: CWE-770 Allocation of Resources Without Limits or Throttling

Metrics

Version	Base score	Base severity	Vector
3.1	7.5	HIGH	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Version: 3.1

Base score: 7.5

Base severity: HIGH

Vector:

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Impacts

CAPEC ID	Description
CAPEC-130	CAPEC-130 Excessive Allocation

CAPEC ID: CAPEC-130

Description: CAPEC-130 Excessive Allocation

Credits

finder

These vulnerabilities were reported to WAGO by Uri Katz of Claroty.

References

Hyperlink	Resource
https://cert.vde.com/en/advisories/VDE-2020-036/	N/A

Hyperlink: https://cert.vde.com/en/advisories/VDE-2020-036/

Resource: N/A

▼Authorized Data Publishers (ADP)

1. CVE Program Container

References

Hyperlink	Resource
https://cert.vde.com/en/advisories/VDE-2020-036/	x_transferred

Hyperlink: https://cert.vde.com/en/advisories/VDE-2020-036/

Resource:

x_transferred

2. CISA ADP Vulnrichment

Metrics Other Info

▼National Vulnerability Database (NVD)

Source:info@cert.vde.com

Published At:09 Nov, 2022 | 16:15

Updated At:07 Nov, 2023 | 03:36

In WAGO I/O-Check Service in multiple products an unauthenticated remote attacker can send a specially crafted packet containing OS commands to provoke a denial of service.

Metrics

Type	Version	Base score	Base severity	Vector
Primary	3.1	7.5	HIGH	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Type: Primary

Version: 3.1

Base score: 7.5

Base severity: HIGH

Vector:

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

CPE Matches

wago>>750-8100_firmware>>Versions before 18(exclusive)

cpe:2.3:o:wago:750-8100_firmware:*:*:*:*:*:*:*:*

wago>>750-8100_firmware>>18

cpe:2.3:o:wago:750-8100_firmware:18:-:*:*:*:*:*:*

wago>>750-8100_firmware>>18

cpe:2.3:o:wago:750-8100_firmware:18:patch_1:*:*:*:*:*:*

wago>>750-8100_firmware>>18

cpe:2.3:o:wago:750-8100_firmware:18:patch_2:*:*:*:*:*:*

wago>>750-8100>>-

cpe:2.3:h:wago:750-8100:-:*:*:*:*:*:*:*

wago>>750-8101_firmware>>Versions before 18(exclusive)

cpe:2.3:o:wago:750-8101_firmware:*:*:*:*:*:*:*:*

wago>>750-8101_firmware>>18

cpe:2.3:o:wago:750-8101_firmware:18:-:*:*:*:*:*:*

wago>>750-8101_firmware>>18

cpe:2.3:o:wago:750-8101_firmware:18:patch_1:*:*:*:*:*:*

wago>>750-8101_firmware>>18

cpe:2.3:o:wago:750-8101_firmware:18:patch_2:*:*:*:*:*:*

wago>>750-8101>>-

cpe:2.3:h:wago:750-8101:-:*:*:*:*:*:*:*

wago>>750-8101\/025-000_firmware>>Versions before 18(exclusive)

cpe:2.3:o:wago:750-8101\/025-000_firmware:*:*:*:*:*:*:*:*

wago>>750-8101\/025-000_firmware>>18

cpe:2.3:o:wago:750-8101\/025-000_firmware:18:-:*:*:*:*:*:*

wago>>750-8101\/025-000_firmware>>18

cpe:2.3:o:wago:750-8101\/025-000_firmware:18:patch_1:*:*:*:*:*:*

wago>>750-8101\/025-000_firmware>>18

cpe:2.3:o:wago:750-8101\/025-000_firmware:18:patch_2:*:*:*:*:*:*

wago>>750-8101\/025-000>>-

cpe:2.3:h:wago:750-8101\/025-000:-:*:*:*:*:*:*:*

wago>>750-8102_firmware>>Versions before 18(exclusive)

cpe:2.3:o:wago:750-8102_firmware:*:*:*:*:*:*:*:*

wago>>750-8102_firmware>>18

cpe:2.3:o:wago:750-8102_firmware:18:-:*:*:*:*:*:*

wago>>750-8102_firmware>>18

cpe:2.3:o:wago:750-8102_firmware:18:patch_1:*:*:*:*:*:*

wago>>750-8102_firmware>>18

cpe:2.3:o:wago:750-8102_firmware:18:patch_2:*:*:*:*:*:*

wago>>750-8102>>-

cpe:2.3:h:wago:750-8102:-:*:*:*:*:*:*:*

wago>>750-8102\/025-000_firmware>>Versions before 18(exclusive)

cpe:2.3:o:wago:750-8102\/025-000_firmware:*:*:*:*:*:*:*:*

wago>>750-8102\/025-000_firmware>>18

cpe:2.3:o:wago:750-8102\/025-000_firmware:18:-:*:*:*:*:*:*

wago>>750-8102\/025-000_firmware>>18

cpe:2.3:o:wago:750-8102\/025-000_firmware:18:patch_1:*:*:*:*:*:*

wago>>750-8102\/025-000_firmware>>18

cpe:2.3:o:wago:750-8102\/025-000_firmware:18:patch_2:*:*:*:*:*:*

wago>>750-8102\/025-000>>-

cpe:2.3:h:wago:750-8102\/025-000:-:*:*:*:*:*:*:*

wago>>750-8202_firmware>>Versions before 18(exclusive)

cpe:2.3:o:wago:750-8202_firmware:*:*:*:*:*:*:*:*

wago>>750-8202_firmware>>18

cpe:2.3:o:wago:750-8202_firmware:18:-:*:*:*:*:*:*

wago>>750-8202_firmware>>18

cpe:2.3:o:wago:750-8202_firmware:18:patch_1:*:*:*:*:*:*

wago>>750-8202_firmware>>18

cpe:2.3:o:wago:750-8202_firmware:18:patch_2:*:*:*:*:*:*

wago>>750-8202>>-

cpe:2.3:h:wago:750-8202:-:*:*:*:*:*:*:*

wago>>750-8202\/000-011_firmware>>Versions before 18(exclusive)

cpe:2.3:o:wago:750-8202\/000-011_firmware:*:*:*:*:*:*:*:*

wago>>750-8202\/000-011_firmware>>18

cpe:2.3:o:wago:750-8202\/000-011_firmware:18:-:*:*:*:*:*:*

wago>>750-8202\/000-011_firmware>>18

cpe:2.3:o:wago:750-8202\/000-011_firmware:18:patch_1:*:*:*:*:*:*

wago>>750-8202\/000-011_firmware>>18

cpe:2.3:o:wago:750-8202\/000-011_firmware:18:patch_2:*:*:*:*:*:*

wago>>750-8202\/000-011>>-

cpe:2.3:h:wago:750-8202\/000-011:-:*:*:*:*:*:*:*

wago>>750-8202\/000-012_firmware>>Versions before 18(exclusive)

cpe:2.3:o:wago:750-8202\/000-012_firmware:*:*:*:*:*:*:*:*

wago>>750-8202\/000-012_firmware>>18

cpe:2.3:o:wago:750-8202\/000-012_firmware:18:-:*:*:*:*:*:*

wago>>750-8202\/000-012_firmware>>18

cpe:2.3:o:wago:750-8202\/000-012_firmware:18:patch_1:*:*:*:*:*:*

wago>>750-8202\/000-012_firmware>>18

cpe:2.3:o:wago:750-8202\/000-012_firmware:18:patch_2:*:*:*:*:*:*

wago>>750-8202\/000-012>>-

cpe:2.3:h:wago:750-8202\/000-012:-:*:*:*:*:*:*:*

wago>>750-8202\/000-022_firmware>>Versions before 18(exclusive)

cpe:2.3:o:wago:750-8202\/000-022_firmware:*:*:*:*:*:*:*:*

wago>>750-8202\/000-022_firmware>>18

cpe:2.3:o:wago:750-8202\/000-022_firmware:18:-:*:*:*:*:*:*

wago>>750-8202\/000-022_firmware>>18

cpe:2.3:o:wago:750-8202\/000-022_firmware:18:patch_1:*:*:*:*:*:*

wago>>750-8202\/000-022_firmware>>18

cpe:2.3:o:wago:750-8202\/000-022_firmware:18:patch_2:*:*:*:*:*:*

wago>>750-8202\/000-022>>-

cpe:2.3:h:wago:750-8202\/000-022:-:*:*:*:*:*:*:*

wago>>750-8202\/025-000_firmware>>Versions before 18(exclusive)

cpe:2.3:o:wago:750-8202\/025-000_firmware:*:*:*:*:*:*:*:*

wago>>750-8202\/025-000_firmware>>18

cpe:2.3:o:wago:750-8202\/025-000_firmware:18:-:*:*:*:*:*:*

wago>>750-8202\/025-000_firmware>>18

cpe:2.3:o:wago:750-8202\/025-000_firmware:18:patch_1:*:*:*:*:*:*

wago>>750-8202\/025-000_firmware>>18

cpe:2.3:o:wago:750-8202\/025-000_firmware:18:patch_2:*:*:*:*:*:*

wago>>750-8202\/025-000>>-

cpe:2.3:h:wago:750-8202\/025-000:-:*:*:*:*:*:*:*

Weaknesses

CWE ID	Type	Source
CWE-770	Primary	info@cert.vde.com

CWE ID: CWE-770

Type: Primary

Source: info@cert.vde.com

References

Hyperlink	Source	Resource
https://cert.vde.com/en/advisories/VDE-2020-036/	info@cert.vde.com	Vendor Advisory

Hyperlink: https://cert.vde.com/en/advisories/VDE-2020-036/

Source: info@cert.vde.com

Resource:

Vendor Advisory