PT-2024-10560 · Wago · 750-352 Firmware+13

Connor Ford · Published 2024-03-13 · Updated 2024-10-23 · CVE-2015-10123

Positive Technologies (AI Summary)

CVSS v3.1

8.8

High

Base vector

AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided descriptions.

Description An unauthenticated remote attacker could send specifically crafted packets to an affected device. If an authenticated user then views that data in a specific page of the web-based management, a buffer overflow will be triggered, allowing the attacker to gain full access to the device.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Buffer Overflow

Weakness Enumeration

CWE-120

Related Identifiers

CVE-2015-10123

Affected Products

750-352 Firmware

750-829 Firmware

750-831 Firmware

750-852 Firmware

750-880 Firmware

750-881 Firmware

750-882 Firmware

750-884 Firmware

750-885 Firmware

750-889 Firmware

Controller Bacnet Ms/Tp

Controller Bacnet/Ip

Ethernet Controller 3Rd Generation

Fieldbus Coupler Ethernet 3Rd Generation

References · 4

• https://nvd.nist.gov/vuln/detail/CVE-2015-10123 · Security Note
• https://t.me/cvenotify/99159 · Telegram Post
• https://t.me/cvenotify/73692 · Telegram Post
• https://cert.vde.com/en/advisories/VDE-2023-039 · Note