WAGO Series 750-88x and 750-352 (Update A)
view advisory published 2020-11-03
Successful exploitation of this vulnerability could allow an attacker to crash the device being accessed using a denial-of-service attack.
01
describes (1)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2020-12516US | high7.5 | — | ||
Older firmware versions (FW1 up to FW10) of the WAGO PLC family 750-88x and 750-352 are vulnerable for a special denial of service attack. | ||||
02
references
External citations — patches, advisories, analysis.
- ICS Advisory ICSA-20-308-01 JSONself
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
03
remediations (10)
- Mitigation750-331/xxx-xxx
Disable unused TCP/UDP ports.
- Mitigation750-352
Disable unused TCP/UDP ports.
- Mitigation750-829
Disable unused TCP/UDP ports.
- Mitigation750-831/xxx-xxx
Disable unused TCP/UDP ports.
- Mitigation750-852
Disable unused TCP/UDP ports.
- Mitigation750-880/xxx-xxx
Disable unused TCP/UDP ports.
- Mitigation750-881
Disable unused TCP/UDP ports.
- Mitigation750-882
Disable unused TCP/UDP ports.
- Mitigation750-885
Disable unused TCP/UDP ports.
- Mitigation750-889
Disable unused TCP/UDP ports.
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan