PT-2018-18652 · Wago+1 · Wago 750 Series Plcs+1

Published 2018-04-03 · Updated 2019-10-09 · CVE-2018-8836

Positive Technologies (AI Summary)

CVSS v3.1

5.3

Medium

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L

Name of the Vulnerable Software and Affected Versions Wago 750 Series PLCs versions 10 and prior

Description The issue is related to an improper implementation of the 3-way handshake during a TCP connection, affecting communications with commission and service tools. An attacker may send specially crafted packets to Port 2455/TCP/IP, which is used in Codesys management software, potentially resulting in a denial-of-service condition of communications with commissioning and service tools.

Recommendations For Wago 750 Series PLCs versions 10 and prior, consider restricting access to Port 2455/TCP/IP as a temporary workaround to minimize the risk of exploitation. Additionally, avoid using the affected Codesys management software until a fix is available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Improper Resource Release

Weakness Enumeration

CWE-404

Related Identifiers

CVE-2018-8836

Affected Products

Codesys

Wago 750 Series Plcs

References · 5

• https://nvd.nist.gov/vuln/detail/CVE-2018-8836 · Security Note
• https://wago.com/medias/Vulnerability-in-the-WAGO-Ethernet-TCP-IP-driver.pdf?context=bWFzdGVyfHJvb3R8MjgxNDk0fGFwcGxpY2F0aW9uL3BkZnxoOTcvaDhkLzkxNTAyMjMyMjA3NjYucGRmfGRlNWQ4ODc0NTE5M2UyNTUwNTIyNDRlOWFkNWI2YjNkMzg0YTVhYzlmYTBjNzM4MDdmNmYzOTM5M2ZlMGEzNzE · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2018-8836 · Vendor Advisory
• https://ics-cert.us-cert.gov/advisories/ICSA-18-088-01 · Note
• http://securityfocus.com/bid/103726 · Note