CVE-2021-34593

Katalog CVE

CVSS 7.5 · High EPSS 2,7%

Kerentanan Improper Handling of Exceptional Conditions pada wago 750-8202 firmware, wago 750-8203 firmware +13 lainnya. Skor CVSS 3.1 7.5 (High) menurut cert.vde.com.

Deskripsi (NVD)

In CODESYS V2 Runtime Toolkit 32 Bit full and PLCWinNT prior to versions V2.4.7.56 unauthenticated crafted invalid requests may result in several denial-of-service conditions. Running PLC programs may be stopped, memory may be leaked, or further communication clients may be blocked from accessing the PLC.

Rincian

Terbit di NVD

26 Oktober 2021

Terakhir diubah

17 Juni 2026

Status NVD

Analyzed

CVSS 3.1

7.5 (High), sumber cert.vde.com
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-755: Improper Handling of Exceptional Conditions

EPSS (30 hari)

2,7% peluang dieksploitasi; lebih tinggi dari 85,7% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://customers.codesys.com/index.php?eID=dumpFile&t=f&f=16877&token=8faab0fc1e069f4edfca5d5aba8146139f67a17... advisory vendor
• http://packetstormsecurity.com/files/164716/CODESYS-2.4.7.0-Denial-Of-Service.html exploit · advisory pihak ketiga · vdb entry
• http://packetstormsecurity.com/files/165874/WAGO-750-8xxx-PLC-Denial-Of-Service-User-Enumeration.html exploit · advisory pihak ketiga · vdb entry
• http://seclists.org/fulldisclosure/2021/Oct/64 mailing list · advisory pihak ketiga