CVE-2020-12522 - NVD | ByteOS Network

NVD Vulnerability Details :

CVE-2020-12522

Analyzed

More Info Official Page

Source-info@cert.vde.com

Published At-17 Dec, 2020 | 23:15

Updated At-23 Dec, 2020 | 15:45

The reported vulnerability allows an attacker who has network access to the device to execute code with specially crafted packets in WAGO Series PFC 100 (750-81xx/xxx-xxx), Series PFC 200 (750-82xx/xxx-xxx), Series Wago Touch Panel 600 Standard Line (762-4xxx), Series Wago Touch Panel 600 Advanced Line (762-5xxx), Series Wago Touch Panel 600 Marine Line (762-6xxx) with firmware versions <=FW10.

Metrics

Type	Version	Base score	Base severity	Vector
Primary	3.1	9.8	CRITICAL	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Secondary	3.1	10.0	CRITICAL	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
Primary	2.0	10.0	HIGH	AV:N/AC:L/Au:N/C:C/I:C/A:C

CPE Matches

wago>>pfc_100_firmware>>Versions up to 10(inclusive)

cpe:2.3:o:wago:pfc_100_firmware:*:*:*:*:*:*:*:*

wago>>750-8101\/025-000>>-

cpe:2.3:h:wago:750-8101\/025-000:-:*:*:*:*:*:*:*

wago>>750-8102\/025-000>>-

cpe:2.3:h:wago:750-8102\/025-000:-:*:*:*:*:*:*:*

wago>>pfc_200_firmware>>Versions up to 10(inclusive)

cpe:2.3:o:wago:pfc_200_firmware:*:*:*:*:*:*:*:*

wago>>750-8202\/000-012>>-

cpe:2.3:h:wago:750-8202\/000-012:-:*:*:*:*:*:*:*

wago>>750-8202\/000-022>>-

cpe:2.3:h:wago:750-8202\/000-022:-:*:*:*:*:*:*:*

wago>>750-8202\/040-000>>-

cpe:2.3:h:wago:750-8202\/040-000:-:*:*:*:*:*:*:*

wago>>750-8202\/040-001>>-

cpe:2.3:h:wago:750-8202\/040-001:-:*:*:*:*:*:*:*

wago>>750-8206\/025-000>>-

cpe:2.3:h:wago:750-8206\/025-000:-:*:*:*:*:*:*:*

wago>>750-8206\/025-001>>-

cpe:2.3:h:wago:750-8206\/025-001:-:*:*:*:*:*:*:*

wago>>750-8206\/040-000>>-

cpe:2.3:h:wago:750-8206\/040-000:-:*:*:*:*:*:*:*

wago>>750-8206\/040-001>>-

cpe:2.3:h:wago:750-8206\/040-001:-:*:*:*:*:*:*:*

wago>>750-8207\/025-000>>-

cpe:2.3:h:wago:750-8207\/025-000:-:*:*:*:*:*:*:*

wago>>750-8207\/025-001>>-

cpe:2.3:h:wago:750-8207\/025-001:-:*:*:*:*:*:*:*

wago>>750-8208\/025-000>>-

cpe:2.3:h:wago:750-8208\/025-000:-:*:*:*:*:*:*:*

wago>>750-8208\/025-001>>-

cpe:2.3:h:wago:750-8208\/025-001:-:*:*:*:*:*:*:*

wago>>750-8210\/025-000>>-

cpe:2.3:h:wago:750-8210\/025-000:-:*:*:*:*:*:*:*

wago>>750-8210\/040-000>>-

cpe:2.3:h:wago:750-8210\/040-000:-:*:*:*:*:*:*:*

wago>>750-8211\/040-000>>-

cpe:2.3:h:wago:750-8211\/040-000:-:*:*:*:*:*:*:*

wago>>750-8211\/040-001>>-

cpe:2.3:h:wago:750-8211\/040-001:-:*:*:*:*:*:*:*

wago>>750-8212\/025-000>>-

cpe:2.3:h:wago:750-8212\/025-000:-:*:*:*:*:*:*:*

wago>>750-8212\/025-001>>-

cpe:2.3:h:wago:750-8212\/025-001:-:*:*:*:*:*:*:*

wago>>750-8212\/025-002>>-

cpe:2.3:h:wago:750-8212\/025-002:-:*:*:*:*:*:*:*

wago>>750-8212\/040-000>>-

cpe:2.3:h:wago:750-8212\/040-000:-:*:*:*:*:*:*:*

wago>>750-8212\/040-010>>-

cpe:2.3:h:wago:750-8212\/040-010:-:*:*:*:*:*:*:*

wago>>750-8213\/040-010>>-

cpe:2.3:h:wago:750-8213\/040-010:-:*:*:*:*:*:*:*

wago>>750-8216\/025-000>>-

cpe:2.3:h:wago:750-8216\/025-000:-:*:*:*:*:*:*:*

wago>>750-8216\/025-001>>-

cpe:2.3:h:wago:750-8216\/025-001:-:*:*:*:*:*:*:*

wago>>750-8217\/025-000>>-

cpe:2.3:h:wago:750-8217\/025-000:-:*:*:*:*:*:*:*

wago>>touch_panel_600_standard_firmware>>Versions up to 10(inclusive)

cpe:2.3:o:wago:touch_panel_600_standard_firmware:*:*:*:*:*:*:*:*

wago>>762-4301\/8000-002>>-

cpe:2.3:h:wago:762-4301\/8000-002:-:*:*:*:*:*:*:*

wago>>762-4302\/8000-002>>-

cpe:2.3:h:wago:762-4302\/8000-002:-:*:*:*:*:*:*:*

wago>>762-4303\/8000-002>>-

cpe:2.3:h:wago:762-4303\/8000-002:-:*:*:*:*:*:*:*

wago>>762-4304\/8000-002>>-

cpe:2.3:h:wago:762-4304\/8000-002:-:*:*:*:*:*:*:*

wago>>touch_panel_600_advanced_firmware>>Versions up to 10(inclusive)

cpe:2.3:o:wago:touch_panel_600_advanced_firmware:*:*:*:*:*:*:*:*

wago>>762-5303\/8000-002>>-

cpe:2.3:h:wago:762-5303\/8000-002:-:*:*:*:*:*:*:*

wago>>762-5304\/8000-002>>-

cpe:2.3:h:wago:762-5304\/8000-002:-:*:*:*:*:*:*:*

wago>>touch_panel_600_marine_firmware>>Versions up to 10(inclusive)

cpe:2.3:o:wago:touch_panel_600_marine_firmware:*:*:*:*:*:*:*:*

wago>>762-6201\/8000-001>>-

cpe:2.3:h:wago:762-6201\/8000-001:-:*:*:*:*:*:*:*

wago>>762-6202\/8000-001>>-

cpe:2.3:h:wago:762-6202\/8000-001:-:*:*:*:*:*:*:*

wago>>762-6203\/8000-001>>-

cpe:2.3:h:wago:762-6203\/8000-001:-:*:*:*:*:*:*:*

wago>>762-6204\/8000-001>>-

cpe:2.3:h:wago:762-6204\/8000-001:-:*:*:*:*:*:*:*

Weaknesses

CWE ID	Type	Source
CWE-78	Primary	nvd@nist.gov
CWE-78	Secondary	info@cert.vde.com

References

Hyperlink	Source	Resource
https://cert.vde.com/en-us/advisories/vde-2020-045	info@cert.vde.com	Third Party Advisory