WAGO: FTP-Server - Denial-of-Service
The FTP server does not properly release memory resources that were reserved for incomplete connection attempts by FTP clients. This could allow a remote attacker to generate a denial of service condition on devices that incorporate a vulnerable version of the FTP server.See also: Siemens Advisory published October 11th, 2022 - SSA-313313
describes (1)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2022-38371US | high7.5 | — | ||
A vulnerability has been identified in APOGEE MBC (PPC) (BACnet) (All versions), APOGEE MBC (PPC) (P2 Ethernet) (All versions), APOGEE MEC (PPC) (BACnet) (All versions), APOGEE MEC… | ||||
references
External citations — patches, advisories, analysis.
remediations (2)
- Mitigation
If you enabled the FTP-Server, but you do not need FTP data transfer, you can deactivate the FTP Server over the product settings in the web-based management. As general security measures strongly WAGO recommends: 1. Use general security best practices to protect systems from local and network attacks. 2. Do not allow direct access to the device from untrusted networks. 3. Update to the latest firmware according to the table in chapter solutions. 4. Industrial control systems (ICS) should not be directly accessible from the Internet, but should be protected by consistently applying the defense-in-depth strategy. The BSI provides general information on securing ICS in the ICS Compendium (https://www.bsi.bund.de/SharedDocs/Downloads/EN/BSI/ICS/ICS-Security_compendium.pdf external link).
- Fixed
Wago recommends all effected users to update to the firmware version listed below: ### Series WAGO 750-3x / -8x | Article Number | Fixed Version | |-----------------------|----------------------------------| | 750-330 | Beta FW17 Q1/2023 | | 750-332 | FW11 after BACnet certification | | 750-352/xxx-xxx | FW17 Q1/2023 | | 750-362/xxx-xxx | FW11 Q1/2023 | | 750-363/xxx-xxx | FW11 Q1/2023 | | 750-364/xxx-xxx | FW11 Q1/2023 | | 750-365/xxx-xxx | FW11 Q1/2023 | | 750-823 | FW11 Q1/2023 | | 750-829 | Beta FW17 Q1/2023 | | 750-831/xxx-xxx | Beta FW17 Q1/2023 | | 750-832/xxx-xxx | FW11 after BACnet certification | | 750-852 | FW17 Q1/2023 | | 750-862 | FW11 Q1/2023 | | 750-880/xxx-xxx | FW17 Q1/2023 | | 750-881 | FW17 Q1/2023 | | 750-882 | FW17 Q1/2023 | | 750-885/xxx-xxx | FW17 Q1/2023 | | 750-889 | FW17 Q1/2023 | | 750-890/xxx-xxx | FW11 Q1/2023 | | 750-891 | FW11 Q1/2023 | | 750-893 | FW11 Q1/2023 |
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan