CVE-2021-34569

high-risk

Published 2022-11-09

In WAGO I/O-Check Service in multiple products an attacker can send a specially crafted packet containing OS commands to crash the diagnostic tool and write memory.

Do I need to act?

-

0.20% chance of exploitation

EPSS score — low exploit probability

-

Not on CISA KEV list

No confirmed active exploitation reported to CISA

?

Patch status unknown

Check vendor advisories for fix availability and mitigation guidance

9

CVSS 9.8/10 Critical

NETWORK / LOW complexity

Affected Products (20)

750-8100 Firmware

750-8100 Firmware

750-8100 Firmware

750-8100 Firmware

750-8101 Firmware

750-8101 Firmware

750-8101 Firmware

750-8101 Firmware

750-8101\/025-000 Firmware

750-8101\/025-000 Firmware

750-8101\/025-000 Firmware

750-8101\/025-000 Firmware

750-8102 Firmware

750-8102 Firmware

750-8102 Firmware

750-8102 Firmware

750-8102\/025-000 Firmware

750-8102\/025-000 Firmware

750-8102\/025-000 Firmware

750-8102\/025-000 Firmware

Affected Vendors

Wago

References (2)

Third Party Advisory https://cert.vde.com/en/advisories/VDE-2020-036/

Third Party Advisory https://cert.vde.com/en/advisories/VDE-2020-036/

66

/ 100

high-risk

Severity 32/34 · Critical

Exploitability 1/34 · Minimal

Exposure 33/34 · Critical