critical9.1
CVE-2021-34584
Crafted web server requests can be utilised to read partial stack or heap memory or may trigger a denial-of- service condition due to a crash in the CODESYS V2…
Impact
Crafted web server requests can be utilised to read partial stack or heap memory or may trigger a denial-of- service condition due to a crash in the CODESYS V2 web server prior to V1.1.9.22.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Wago | 750-823 Firmware | before fw10 |
| Wago | 750-829 Firmware | before fw17 |
| Wago | 750-831 Firmware | before fw17 |
| Wago | 750-832 Firmware | before fw10 |
| Wago | 750-852 Firmware | before fw17 |
| Wago | 750-862 Firmware | before fw10 |
| Wago | 750-880 Firmware | before fw17 |
| Wago | 750-881 Firmware | before fw17 |
| Wago | 750-882 Firmware | before fw17 |
| Wago | 750-885 Firmware | before fw17 |
| Wago | 750-889 Firmware | before fw17 |
| Wago | 750-890 Firmware | before fw10 |
Weakness classification
References
- NVD record
- CVE.org record
- https://customers.codesys.com/index.php?eID=dumpFile&t=f&f=16876&token=a3f1d937f95e7034879f4f2ea8e5a99b168256a7&download=
- https://www.tenable.com/security/research/tra-2021-47
- https://customers.codesys.com/index.php?eID=dumpFile&t=f&f=16876&token=a3f1d937f95e7034879f4f2ea8e5a99b168256a7&download=
- https://www.tenable.com/security/research/tra-2021-47