PT-2023-3836 · Wago · Wago 750-3X/-8X

Roman Ezhov · Publicado 2023-06-14 · Atualizado 2024-10-02 · CVE-2023-1150

Positive Technologies (AI Summary)

CVSS v2.0

7.8

Alta

Vetor base

AV:N/AC:L/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions WAGO 750-3x/-8x products (affected versions not specified)

Description The issue is related to uncontrolled resource consumption in the mentioned products, which may allow an unauthenticated remote attacker to cause a denial of service (DoS) of the MODBUS server by sending specially crafted packets. This could potentially disrupt the service, making it unavailable to users.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Resource Exhaustion

Missing Release of Resource after Effective Lifetime

Enumeração de Fraquezas

CWE-400

CWE-772

Identificadores relacionados

BDU:2023-04128

CVE-2023-1150

Produtos afetados

Wago 750-3X/-8X

Referências · 6

• https://bdu.fstec.ru/vul/2023-04128 · Nota de Segurança
• https://osv.dev/vulnerability/CVE-2023-1150 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2023-1150 · Nota de Segurança
• https://vuldb.com/ru/?id.232367 · Nota
• https://t.me/cvenotify/53806 · Publicação no Telegram
• https://cert.vde.com/en/advisories/VDE-2023-005 · Nota