PT-2023-3435 · Wago · Wago

Abdelrahman Hassanien + 1 · Publicado 2023-06-20 · Atualizado 2024-10-02 · CVE-2023-1619

Positive Technologies (AI Summary)

CVSS v2.0

6.1

Média

Vetor base

AV:N/AC:L/Au:M/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions WAGO devices (affected versions not specified)

Description The issue is related to insufficient input validation in the software of WAGO programmable logic controllers, which may allow an authenticated remote attacker with high privileges to cause a denial of service (DoS) by sending a malformed packet.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

RCE

Improper Resource Release

Enumeração de Fraquezas

CWE-1288

CWE-20

CWE-404

Identificadores relacionados

BDU:2023-03614

CVE-2023-1619

Produtos afetados

Wago

Referências · 6

• https://cert.vde.com/en/advisories/VDE-2023-006 · Aviso do Fabricante
• https://forescout.com/resources/concluding-ot-icefall-report · Nota
• https://bdu.fstec.ru/vul/2023-03614 · Nota de Segurança
• https://vuldb.com/?id.232366 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2023-1619 · Nota de Segurança
• https://osv.dev/vulnerability/CVE-2023-1619 · Aviso do Fabricante