VDE-2022-040

WAGO: Multiple Vulnerabilities in Controller with WAGO I/O-Pro / CODESYS 2.3 Runtime

view advisory published 2022-10-17

UPDATE A: Solution has updated release datesUPDATE B: Solution has updated release datesThis Advisory is published with reference to: CODESYS Advisory 2022-11 (Security update for CODESYS Control V2) CODESYS Advisory 2022-12 (Security update for CODESYS V2 password transport) CODESYS Advisory 2022-13 (Security update for CODESYS Gateway V2)

describes (14)

Related CVEs.

ID	severity	EPSS	exploitable	published
CVE-2022-32143US	medium6.5	1.22% (69th)	—	2022-06-24
In multiple CODESYS products, file download and upload function allows access to internal files in the working directory e.g. firmware files of the PLC. All requests are processed…
CVE-2022-32142US	medium5.5	1.08% (65th)	—	2022-06-24
Multiple CODESYS Products are prone to a out-of bounds read or write access. A low privileged remote attacker may craft a request with invalid offset, which can cause an out-of-bou…
CVE-2022-32141US	medium4.0	1.05% (64th)	—	2022-06-24
Multiple CODESYS Products are prone to a buffer over read. A low privileged remote attacker may craft a request with an invalid offset, which can cause an internal buffer over-read…
CVE-2022-32140US	medium4.0	1.06% (65th)	—	2022-06-24
Multiple CODESYS products are affected to a buffer overflow.A low privileged remote attacker may craft a request, which can cause a buffer copy without checking the size of the ser…
CVE-2022-32139US	medium4.0	1.05% (64th)	—	2022-06-24
In multiple CODESYS products, a low privileged remote attacker may craft a request, which cause an out-of-bounds read, resulting in a denial-of-service condition. User Interaction…
CVE-2022-32138US	medium6.5	1.22% (69th)	—	2022-06-24
In multiple CODESYS products, a remote attacker may craft a request which may cause an unexpected sign extension, resulting in a denial-of-service condition or memory overwrite.
CVE-2022-32137US	medium6.5	1.43% (73rd)	—	2022-06-24
In multiple CODESYS products, a low privileged remote attacker may craft a request, which may cause a heap-based buffer overflow, resulting in a denial-of-service condition or memo…
CVE-2022-32136US	medium6.5	1.05% (64th)	—	2022-06-24
In multiple CODESYS products, a low privileged remote attacker may craft a request that cause a read access to an uninitialized pointer, resulting in a denial-of-service. User inte…
CVE-2022-31806US	medium6.8OT elevated	1.23% (69th)	—	2022-06-24
In CODESYS V2 PLCWinNT and Runtime Toolkit 32 in versions prior to V2.4.7.57 password protection is not enabled by default and there is no information or prompt to enable password…
CVE-2022-31805US	medium4.3	1.05% (64th)	—	2022-06-24
In the CODESYS Development System multiple components in multiple versions transmit the passwords for the communication between clients and servers unprotected.
CVE-2022-31804US	medium5.0	1.16% (67th)	—	2022-06-24
The CODESYS Gateway Server V2 does not verifiy that the size of a request is within expected limits. An unauthenticated attacker may allocate an arbitrary amount of memory, which m…
CVE-2022-31803US	medium5.0	1.16% (67th)	—	2022-06-24
In CODESYS Gateway Server V2 an insufficient check for the activity of TCP client connections allows an unauthenticated attacker to consume all available TCP connections and preven…
CVE-2022-31802US	high7.5	1.33% (71st)	—	2022-06-24
In CODESYS Gateway Server V2 for versions prior to V2.3.9.38 only a part of the the specified password is been compared to the real CODESYS Gateway password. An attacker may perfor…
CVE-2022-1965US	medium5.5	1.08% (65th)	—	2022-06-24
Multiple products of CODESYS implement a improper error handling. A low privilege remote attacker may craft a request, which is not properly processed by the error handling. In con…

references

External citations — patches, advisories, analysis.

remediations (28)

Mitigation
For vulnerabilities CVE-2022-1965, CVE-2022-32136, CVE-2022-32137, CVE-2022-32138, CVE-2022-32139, CVE-2022-32140, CVE-2022-32141, CVE-2022-32142, CVE-2022-32143 (CODESYS Advisory 2022-11): - Activation of online user management, to prevent unallowed actions from unauthorized attackers - Setting strong passwords - Use e!Runtime or CODESYS V3 For vulnerabilities CVE-2022-31805, CVE-2022-31806 (CODESYS Advisory 2022-12): - Activation of online user management, to prevent unallowed actions from unauthorized attackers - Use encryption of online communication whenever possible, this protects password transmission.
Mitigation
For vulnerabilities CVE-2022-1965, CVE-2022-32136, CVE-2022-32137, CVE-2022-32138, CVE-2022-32139, CVE-2022-32140, CVE-2022-32141, CVE-2022-32142, CVE-2022-32143 (CODESYS Advisory 2022-11): - Activation of online user management, to prevent unallowed actions from unauthorized attackers - Setting strong passwords - Use e!Runtime or CODESYS V3 For vulnerabilities CVE-2022-31805, CVE-2022-31806 (CODESYS Advisory 2022-12): - Activation of online user management, to prevent unallowed actions from unauthorized attackers - Use encryption of online communication whenever possible, this protects password transmission.
Mitigation
For vulnerabilities CVE-2022-1965, CVE-2022-32136, CVE-2022-32137, CVE-2022-32138, CVE-2022-32139, CVE-2022-32140, CVE-2022-32141, CVE-2022-32142, CVE-2022-32143 (CODESYS Advisory 2022-11): - Activation of online user management, to prevent unallowed actions from unauthorized attackers - Setting strong passwords - Use e!Runtime or CODESYS V3 For vulnerabilities CVE-2022-31805, CVE-2022-31806 (CODESYS Advisory 2022-12): - Activation of online user management, to prevent unallowed actions from unauthorized attackers - Use encryption of online communication whenever possible, this protects password transmission.
Mitigation
For vulnerabilities CVE-2022-1965, CVE-2022-32136, CVE-2022-32137, CVE-2022-32138, CVE-2022-32139, CVE-2022-32140, CVE-2022-32141, CVE-2022-32142, CVE-2022-32143 (CODESYS Advisory 2022-11): - Activation of online user management, to prevent unallowed actions from unauthorized attackers - Setting strong passwords - Use e!Runtime or CODESYS V3 For vulnerabilities CVE-2022-31805, CVE-2022-31806 (CODESYS Advisory 2022-12): - Activation of online user management, to prevent unallowed actions from unauthorized attackers - Use encryption of online communication whenever possible, this protects password transmission.
Mitigation
For vulnerabilities CVE-2022-1965, CVE-2022-32136, CVE-2022-32137, CVE-2022-32138, CVE-2022-32139, CVE-2022-32140, CVE-2022-32141, CVE-2022-32142, CVE-2022-32143 (CODESYS Advisory 2022-11): - Activation of online user management, to prevent unallowed actions from unauthorized attackers - Setting strong passwords - Use e!Runtime or CODESYS V3 For vulnerabilities CVE-2022-31805, CVE-2022-31806 (CODESYS Advisory 2022-12): - Activation of online user management, to prevent unallowed actions from unauthorized attackers - Use encryption of online communication whenever possible, this protects password transmission.
Mitigation
For vulnerabilities CVE-2022-1965, CVE-2022-32136, CVE-2022-32137, CVE-2022-32138, CVE-2022-32139, CVE-2022-32140, CVE-2022-32141, CVE-2022-32142, CVE-2022-32143 (CODESYS Advisory 2022-11): - Activation of online user management, to prevent unallowed actions from unauthorized attackers - Setting strong passwords - Use e!Runtime or CODESYS V3 For vulnerabilities CVE-2022-31805, CVE-2022-31806 (CODESYS Advisory 2022-12): - Activation of online user management, to prevent unallowed actions from unauthorized attackers - Use encryption of online communication whenever possible, this protects password transmission.
Mitigation
For vulnerabilities CVE-2022-1965, CVE-2022-32136, CVE-2022-32137, CVE-2022-32138, CVE-2022-32139, CVE-2022-32140, CVE-2022-32141, CVE-2022-32142, CVE-2022-32143 (CODESYS Advisory 2022-11): - Activation of online user management, to prevent unallowed actions from unauthorized attackers - Setting strong passwords - Use e!Runtime or CODESYS V3 For vulnerabilities CVE-2022-31805, CVE-2022-31806 (CODESYS Advisory 2022-12): - Activation of online user management, to prevent unallowed actions from unauthorized attackers - Use encryption of online communication whenever possible, this protects password transmission.
Mitigation
For vulnerabilities CVE-2022-1965, CVE-2022-32136, CVE-2022-32137, CVE-2022-32138, CVE-2022-32139, CVE-2022-32140, CVE-2022-32141, CVE-2022-32142, CVE-2022-32143 (CODESYS Advisory 2022-11): - Activation of online user management, to prevent unallowed actions from unauthorized attackers - Setting strong passwords - Use e!Runtime or CODESYS V3 For vulnerabilities CVE-2022-31805, CVE-2022-31806 (CODESYS Advisory 2022-12): - Activation of online user management, to prevent unallowed actions from unauthorized attackers - Use encryption of online communication whenever possible, this protects password transmission.
Mitigation
For vulnerabilities CVE-2022-1965, CVE-2022-32136, CVE-2022-32137, CVE-2022-32138, CVE-2022-32139, CVE-2022-32140, CVE-2022-32141, CVE-2022-32142, CVE-2022-32143 (CODESYS Advisory 2022-11): - Activation of online user management, to prevent unallowed actions from unauthorized attackers - Setting strong passwords - Use e!Runtime or CODESYS V3 For vulnerabilities CVE-2022-31805, CVE-2022-31806 (CODESYS Advisory 2022-12): - Activation of online user management, to prevent unallowed actions from unauthorized attackers - Use encryption of online communication whenever possible, this protects password transmission.
Mitigation
For vulnerabilities CVE-2022-1965, CVE-2022-32136, CVE-2022-32137, CVE-2022-32138, CVE-2022-32139, CVE-2022-32140, CVE-2022-32141, CVE-2022-32142, CVE-2022-32143 (CODESYS Advisory 2022-11): - Activation of online user management, to prevent unallowed actions from unauthorized attackers - Setting strong passwords - Use e!Runtime or CODESYS V3 For vulnerabilities CVE-2022-31805, CVE-2022-31806 (CODESYS Advisory 2022-12): - Activation of online user management, to prevent unallowed actions from unauthorized attackers - Use encryption of online communication whenever possible, this protects password transmission.
Mitigation
For vulnerabilities CVE-2022-1965, CVE-2022-32136, CVE-2022-32137, CVE-2022-32138, CVE-2022-32139, CVE-2022-32140, CVE-2022-32141, CVE-2022-32142, CVE-2022-32143 (CODESYS Advisory 2022-11): - Activation of online user management, to prevent unallowed actions from unauthorized attackers - Setting strong passwords - Use e!Runtime or CODESYS V3 For vulnerabilities CVE-2022-31805, CVE-2022-31806 (CODESYS Advisory 2022-12): - Activation of online user management, to prevent unallowed actions from unauthorized attackers - Use encryption of online communication whenever possible, this protects password transmission.
Mitigation
For vulnerabilities CVE-2022-1965, CVE-2022-32136, CVE-2022-32137, CVE-2022-32138, CVE-2022-32139, CVE-2022-32140, CVE-2022-32141, CVE-2022-32142, CVE-2022-32143 (CODESYS Advisory 2022-11): - Activation of online user management, to prevent unallowed actions from unauthorized attackers - Setting strong passwords - Use e!Runtime or CODESYS V3 For vulnerabilities CVE-2022-31805, CVE-2022-31806 (CODESYS Advisory 2022-12): - Activation of online user management, to prevent unallowed actions from unauthorized attackers - Use encryption of online communication whenever possible, this protects password transmission.
Mitigation
For vulnerabilities CVE-2022-1965, CVE-2022-32136, CVE-2022-32137, CVE-2022-32138, CVE-2022-32139, CVE-2022-32140, CVE-2022-32141, CVE-2022-32142, CVE-2022-32143 (CODESYS Advisory 2022-11): - Activation of online user management, to prevent unallowed actions from unauthorized attackers - Setting strong passwords - Use e!Runtime or CODESYS V3 For vulnerabilities CVE-2022-31805, CVE-2022-31806 (CODESYS Advisory 2022-12): - Activation of online user management, to prevent unallowed actions from unauthorized attackers - Use encryption of online communication whenever possible, this protects password transmission.
Mitigation
For vulnerabilities CVE-2022-1965, CVE-2022-32136, CVE-2022-32137, CVE-2022-32138, CVE-2022-32139, CVE-2022-32140, CVE-2022-32141, CVE-2022-32142, CVE-2022-32143 (CODESYS Advisory 2022-11): - Activation of online user management, to prevent unallowed actions from unauthorized attackers - Setting strong passwords - Use e!Runtime or CODESYS V3 For vulnerabilities CVE-2022-31805, CVE-2022-31806 (CODESYS Advisory 2022-12): - Activation of online user management, to prevent unallowed actions from unauthorized attackers - Use encryption of online communication whenever possible, this protects password transmission.
Fixed
WAGO recommends that all affected users with WAGO I/O-PRO/CODESYS 2.3 PLCs update to the firmware and use the latest version of WAGO I/O-Pro as soon as it is available. Until the updates are available, we recommend switching off the CODESYS IP port 2455 after commissioning or, if this not possible, use a strong admin password. ### PFC200 Family | Ord. No. | Firmware | |-----------------------|----------------------------------| | 750-8202/xxx-xxx | UPDATE B: Available in Q1 2024 | | 750-8203/xxx-xxx | UPDATE B: Available in Q1 2024 | | 750-8204/xxx-xxx | UPDATE B: Available in Q1 2024 | | 750-8206/xxx-xxx | UPDATE B: Available in Q1 2024 | | 750-8207/xxx-xxx | UPDATE B: Available in Q1 2024 | | 750-8208/xxx-xxx | UPDATE B: Available in Q1 2024 | | 750-8210/xxx-xxx | UPDATE B: Available in Q1 2024 | | 750-8211/xxx-xxx | UPDATE B: Available in Q1 2024 | | 750-8212/xxx-xxx | UPDATE B: Available in Q1 2024 | | 750-8213/xxx-xxx | UPDATE B: Available in Q1 2024 | | 750-8214/xxx-xxx | UPDATE B: Available in Q1 2024 | | 750-8216/xxx-xxx | UPDATE B: Available in Q1 2024 | | 750-8217/xxx-xxx | UPDATE B: Available in Q1 2024 | ### Ethernet Controller 4th Generation Family – UPDATE B | Ord. No. | Firmware | |-----------------------|----------------------------------| | 750-823 | UPDATE B: Available in Q1 2024 | | 750-332 | UPDATE B: Available in Q1 2024 | | 750-832/xxx-xxx | UPDATE B: Available in Q1 2024 | | 750-862 | UPDATE B: Available in Q1 2024 | | 750-890/xxx-xxx | UPDATE B: Available in Q1 2024 | | 750-891 | UPDATE B: Available in Q1 2024 | | 750-893 | UPDATE B: Available in Q1 2024 | ### Ethernet Controller 3rd Generation Family – UPDATE B | Ord. No. | Firmware | |-----------------------|----------------------------------| | 750-331 | UPDATE B: Available in Q1 2024 | | 750-829 | UPDATE B: Available in Q1 2024 | | 750-831/xxx-xxx | UPDATE B: Available in Q1 2024 | | 750-852 | UPDATE B: Available in Q1 2024 | | 750-880/xxx-xxx | UPDATE B: Available in Q1 2024 | | 750-881 | UPDATE B: Available in Q1 2024 | | 750-882 | UPDATE B: Available in Q1 2024 | | 750-885/xxx-xxx | UPDATE B: Available in Q1 2024 | | 750-889 | UPDATE B: Available in Q1 2024 | ### Engineering Software | Name | Firmware | |------------------|----------------------------------| | WAGO-I/O-PRO 32 | UPDATE B: Available in Q1 2024 |
Fixed
WAGO recommends that all affected users with WAGO I/O-PRO/CODESYS 2.3 PLCs update to the firmware and use the latest version of WAGO I/O-Pro as soon as it is available. Until the updates are available, we recommend switching off the CODESYS IP port 2455 after commissioning or, if this not possible, use a strong admin password. ### PFC200 Family | Ord. No. | Firmware | |-----------------------|----------------------------------| | 750-8202/xxx-xxx | UPDATE B: Available in Q1 2024 | | 750-8203/xxx-xxx | UPDATE B: Available in Q1 2024 | | 750-8204/xxx-xxx | UPDATE B: Available in Q1 2024 | | 750-8206/xxx-xxx | UPDATE B: Available in Q1 2024 | | 750-8207/xxx-xxx | UPDATE B: Available in Q1 2024 | | 750-8208/xxx-xxx | UPDATE B: Available in Q1 2024 | | 750-8210/xxx-xxx | UPDATE B: Available in Q1 2024 | | 750-8211/xxx-xxx | UPDATE B: Available in Q1 2024 | | 750-8212/xxx-xxx | UPDATE B: Available in Q1 2024 | | 750-8213/xxx-xxx | UPDATE B: Available in Q1 2024 | | 750-8214/xxx-xxx | UPDATE B: Available in Q1 2024 | | 750-8216/xxx-xxx | UPDATE B: Available in Q1 2024 | | 750-8217/xxx-xxx | UPDATE B: Available in Q1 2024 | ### Ethernet Controller 4th Generation Family – UPDATE B | Ord. No. | Firmware | |-----------------------|----------------------------------| | 750-823 | UPDATE B: Available in Q1 2024 | | 750-332 | UPDATE B: Available in Q1 2024 | | 750-832/xxx-xxx | UPDATE B: Available in Q1 2024 | | 750-862 | UPDATE B: Available in Q1 2024 | | 750-890/xxx-xxx | UPDATE B: Available in Q1 2024 | | 750-891 | UPDATE B: Available in Q1 2024 | | 750-893 | UPDATE B: Available in Q1 2024 | ### Ethernet Controller 3rd Generation Family – UPDATE B | Ord. No. | Firmware | |-----------------------|----------------------------------| | 750-331 | UPDATE B: Available in Q1 2024 | | 750-829 | UPDATE B: Available in Q1 2024 | | 750-831/xxx-xxx | UPDATE B: Available in Q1 2024 | | 750-852 | UPDATE B: Available in Q1 2024 | | 750-880/xxx-xxx | UPDATE B: Available in Q1 2024 | | 750-881 | UPDATE B: Available in Q1 2024 | | 750-882 | UPDATE B: Available in Q1 2024 | | 750-885/xxx-xxx | UPDATE B: Available in Q1 2024 | | 750-889 | UPDATE B: Available in Q1 2024 | ### Engineering Software | Name | Firmware | |------------------|----------------------------------| | WAGO-I/O-PRO 32 | UPDATE B: Available in Q1 2024 |
Fixed
WAGO recommends that all affected users with WAGO I/O-PRO/CODESYS 2.3 PLCs update to the firmware and use the latest version of WAGO I/O-Pro as soon as it is available. Until the updates are available, we recommend switching off the CODESYS IP port 2455 after commissioning or, if this not possible, use a strong admin password. ### PFC200 Family | Ord. No. | Firmware | |-----------------------|----------------------------------| | 750-8202/xxx-xxx | UPDATE B: Available in Q1 2024 | | 750-8203/xxx-xxx | UPDATE B: Available in Q1 2024 | | 750-8204/xxx-xxx | UPDATE B: Available in Q1 2024 | | 750-8206/xxx-xxx | UPDATE B: Available in Q1 2024 | | 750-8207/xxx-xxx | UPDATE B: Available in Q1 2024 | | 750-8208/xxx-xxx | UPDATE B: Available in Q1 2024 | | 750-8210/xxx-xxx | UPDATE B: Available in Q1 2024 | | 750-8211/xxx-xxx | UPDATE B: Available in Q1 2024 | | 750-8212/xxx-xxx | UPDATE B: Available in Q1 2024 | | 750-8213/xxx-xxx | UPDATE B: Available in Q1 2024 | | 750-8214/xxx-xxx | UPDATE B: Available in Q1 2024 | | 750-8216/xxx-xxx | UPDATE B: Available in Q1 2024 | | 750-8217/xxx-xxx | UPDATE B: Available in Q1 2024 | ### Ethernet Controller 4th Generation Family – UPDATE B | Ord. No. | Firmware | |-----------------------|----------------------------------| | 750-823 | UPDATE B: Available in Q1 2024 | | 750-332 | UPDATE B: Available in Q1 2024 | | 750-832/xxx-xxx | UPDATE B: Available in Q1 2024 | | 750-862 | UPDATE B: Available in Q1 2024 | | 750-890/xxx-xxx | UPDATE B: Available in Q1 2024 | | 750-891 | UPDATE B: Available in Q1 2024 | | 750-893 | UPDATE B: Available in Q1 2024 | ### Ethernet Controller 3rd Generation Family – UPDATE B | Ord. No. | Firmware | |-----------------------|----------------------------------| | 750-331 | UPDATE B: Available in Q1 2024 | | 750-829 | UPDATE B: Available in Q1 2024 | | 750-831/xxx-xxx | UPDATE B: Available in Q1 2024 | | 750-852 | UPDATE B: Available in Q1 2024 | | 750-880/xxx-xxx | UPDATE B: Available in Q1 2024 | | 750-881 | UPDATE B: Available in Q1 2024 | | 750-882 | UPDATE B: Available in Q1 2024 | | 750-885/xxx-xxx | UPDATE B: Available in Q1 2024 | | 750-889 | UPDATE B: Available in Q1 2024 | ### Engineering Software | Name | Firmware | |------------------|----------------------------------| | WAGO-I/O-PRO 32 | UPDATE B: Available in Q1 2024 |
Fixed
WAGO recommends that all affected users with WAGO I/O-PRO/CODESYS 2.3 PLCs update to the firmware and use the latest version of WAGO I/O-Pro as soon as it is available. Until the updates are available, we recommend switching off the CODESYS IP port 2455 after commissioning or, if this not possible, use a strong admin password. ### PFC200 Family | Ord. No. | Firmware | |-----------------------|----------------------------------| | 750-8202/xxx-xxx | UPDATE B: Available in Q1 2024 | | 750-8203/xxx-xxx | UPDATE B: Available in Q1 2024 | | 750-8204/xxx-xxx | UPDATE B: Available in Q1 2024 | | 750-8206/xxx-xxx | UPDATE B: Available in Q1 2024 | | 750-8207/xxx-xxx | UPDATE B: Available in Q1 2024 | | 750-8208/xxx-xxx | UPDATE B: Available in Q1 2024 | | 750-8210/xxx-xxx | UPDATE B: Available in Q1 2024 | | 750-8211/xxx-xxx | UPDATE B: Available in Q1 2024 | | 750-8212/xxx-xxx | UPDATE B: Available in Q1 2024 | | 750-8213/xxx-xxx | UPDATE B: Available in Q1 2024 | | 750-8214/xxx-xxx | UPDATE B: Available in Q1 2024 | | 750-8216/xxx-xxx | UPDATE B: Available in Q1 2024 | | 750-8217/xxx-xxx | UPDATE B: Available in Q1 2024 | ### Ethernet Controller 4th Generation Family – UPDATE B | Ord. No. | Firmware | |-----------------------|----------------------------------| | 750-823 | UPDATE B: Available in Q1 2024 | | 750-332 | UPDATE B: Available in Q1 2024 | | 750-832/xxx-xxx | UPDATE B: Available in Q1 2024 | | 750-862 | UPDATE B: Available in Q1 2024 | | 750-890/xxx-xxx | UPDATE B: Available in Q1 2024 | | 750-891 | UPDATE B: Available in Q1 2024 | | 750-893 | UPDATE B: Available in Q1 2024 | ### Ethernet Controller 3rd Generation Family – UPDATE B | Ord. No. | Firmware | |-----------------------|----------------------------------| | 750-331 | UPDATE B: Available in Q1 2024 | | 750-829 | UPDATE B: Available in Q1 2024 | | 750-831/xxx-xxx | UPDATE B: Available in Q1 2024 | | 750-852 | UPDATE B: Available in Q1 2024 | | 750-880/xxx-xxx | UPDATE B: Available in Q1 2024 | | 750-881 | UPDATE B: Available in Q1 2024 | | 750-882 | UPDATE B: Available in Q1 2024 | | 750-885/xxx-xxx | UPDATE B: Available in Q1 2024 | | 750-889 | UPDATE B: Available in Q1 2024 | ### Engineering Software | Name | Firmware | |------------------|----------------------------------| | WAGO-I/O-PRO 32 | UPDATE B: Available in Q1 2024 |
Fixed
WAGO recommends that all affected users with WAGO I/O-PRO/CODESYS 2.3 PLCs update to the firmware and use the latest version of WAGO I/O-Pro as soon as it is available. Until the updates are available, we recommend switching off the CODESYS IP port 2455 after commissioning or, if this not possible, use a strong admin password. ### PFC200 Family | Ord. No. | Firmware | |-----------------------|----------------------------------| | 750-8202/xxx-xxx | UPDATE B: Available in Q1 2024 | | 750-8203/xxx-xxx | UPDATE B: Available in Q1 2024 | | 750-8204/xxx-xxx | UPDATE B: Available in Q1 2024 | | 750-8206/xxx-xxx | UPDATE B: Available in Q1 2024 | | 750-8207/xxx-xxx | UPDATE B: Available in Q1 2024 | | 750-8208/xxx-xxx | UPDATE B: Available in Q1 2024 | | 750-8210/xxx-xxx | UPDATE B: Available in Q1 2024 | | 750-8211/xxx-xxx | UPDATE B: Available in Q1 2024 | | 750-8212/xxx-xxx | UPDATE B: Available in Q1 2024 | | 750-8213/xxx-xxx | UPDATE B: Available in Q1 2024 | | 750-8214/xxx-xxx | UPDATE B: Available in Q1 2024 | | 750-8216/xxx-xxx | UPDATE B: Available in Q1 2024 | | 750-8217/xxx-xxx | UPDATE B: Available in Q1 2024 | ### Ethernet Controller 4th Generation Family – UPDATE B | Ord. No. | Firmware | |-----------------------|----------------------------------| | 750-823 | UPDATE B: Available in Q1 2024 | | 750-332 | UPDATE B: Available in Q1 2024 | | 750-832/xxx-xxx | UPDATE B: Available in Q1 2024 | | 750-862 | UPDATE B: Available in Q1 2024 | | 750-890/xxx-xxx | UPDATE B: Available in Q1 2024 | | 750-891 | UPDATE B: Available in Q1 2024 | | 750-893 | UPDATE B: Available in Q1 2024 | ### Ethernet Controller 3rd Generation Family – UPDATE B | Ord. No. | Firmware | |-----------------------|----------------------------------| | 750-331 | UPDATE B: Available in Q1 2024 | | 750-829 | UPDATE B: Available in Q1 2024 | | 750-831/xxx-xxx | UPDATE B: Available in Q1 2024 | | 750-852 | UPDATE B: Available in Q1 2024 | | 750-880/xxx-xxx | UPDATE B: Available in Q1 2024 | | 750-881 | UPDATE B: Available in Q1 2024 | | 750-882 | UPDATE B: Available in Q1 2024 | | 750-885/xxx-xxx | UPDATE B: Available in Q1 2024 | | 750-889 | UPDATE B: Available in Q1 2024 | ### Engineering Software | Name | Firmware | |------------------|----------------------------------| | WAGO-I/O-PRO 32 | UPDATE B: Available in Q1 2024 |
Fixed
WAGO recommends that all affected users with WAGO I/O-PRO/CODESYS 2.3 PLCs update to the firmware and use the latest version of WAGO I/O-Pro as soon as it is available. Until the updates are available, we recommend switching off the CODESYS IP port 2455 after commissioning or, if this not possible, use a strong admin password. ### PFC200 Family | Ord. No. | Firmware | |-----------------------|----------------------------------| | 750-8202/xxx-xxx | UPDATE B: Available in Q1 2024 | | 750-8203/xxx-xxx | UPDATE B: Available in Q1 2024 | | 750-8204/xxx-xxx | UPDATE B: Available in Q1 2024 | | 750-8206/xxx-xxx | UPDATE B: Available in Q1 2024 | | 750-8207/xxx-xxx | UPDATE B: Available in Q1 2024 | | 750-8208/xxx-xxx | UPDATE B: Available in Q1 2024 | | 750-8210/xxx-xxx | UPDATE B: Available in Q1 2024 | | 750-8211/xxx-xxx | UPDATE B: Available in Q1 2024 | | 750-8212/xxx-xxx | UPDATE B: Available in Q1 2024 | | 750-8213/xxx-xxx | UPDATE B: Available in Q1 2024 | | 750-8214/xxx-xxx | UPDATE B: Available in Q1 2024 | | 750-8216/xxx-xxx | UPDATE B: Available in Q1 2024 | | 750-8217/xxx-xxx | UPDATE B: Available in Q1 2024 | ### Ethernet Controller 4th Generation Family – UPDATE B | Ord. No. | Firmware | |-----------------------|----------------------------------| | 750-823 | UPDATE B: Available in Q1 2024 | | 750-332 | UPDATE B: Available in Q1 2024 | | 750-832/xxx-xxx | UPDATE B: Available in Q1 2024 | | 750-862 | UPDATE B: Available in Q1 2024 | | 750-890/xxx-xxx | UPDATE B: Available in Q1 2024 | | 750-891 | UPDATE B: Available in Q1 2024 | | 750-893 | UPDATE B: Available in Q1 2024 | ### Ethernet Controller 3rd Generation Family – UPDATE B | Ord. No. | Firmware | |-----------------------|----------------------------------| | 750-331 | UPDATE B: Available in Q1 2024 | | 750-829 | UPDATE B: Available in Q1 2024 | | 750-831/xxx-xxx | UPDATE B: Available in Q1 2024 | | 750-852 | UPDATE B: Available in Q1 2024 | | 750-880/xxx-xxx | UPDATE B: Available in Q1 2024 | | 750-881 | UPDATE B: Available in Q1 2024 | | 750-882 | UPDATE B: Available in Q1 2024 | | 750-885/xxx-xxx | UPDATE B: Available in Q1 2024 | | 750-889 | UPDATE B: Available in Q1 2024 | ### Engineering Software | Name | Firmware | |------------------|----------------------------------| | WAGO-I/O-PRO 32 | UPDATE B: Available in Q1 2024 |
Fixed
WAGO recommends that all affected users with WAGO I/O-PRO/CODESYS 2.3 PLCs update to the firmware and use the latest version of WAGO I/O-Pro as soon as it is available. Until the updates are available, we recommend switching off the CODESYS IP port 2455 after commissioning or, if this not possible, use a strong admin password. ### PFC200 Family | Ord. No. | Firmware | |-----------------------|----------------------------------| | 750-8202/xxx-xxx | UPDATE B: Available in Q1 2024 | | 750-8203/xxx-xxx | UPDATE B: Available in Q1 2024 | | 750-8204/xxx-xxx | UPDATE B: Available in Q1 2024 | | 750-8206/xxx-xxx | UPDATE B: Available in Q1 2024 | | 750-8207/xxx-xxx | UPDATE B: Available in Q1 2024 | | 750-8208/xxx-xxx | UPDATE B: Available in Q1 2024 | | 750-8210/xxx-xxx | UPDATE B: Available in Q1 2024 | | 750-8211/xxx-xxx | UPDATE B: Available in Q1 2024 | | 750-8212/xxx-xxx | UPDATE B: Available in Q1 2024 | | 750-8213/xxx-xxx | UPDATE B: Available in Q1 2024 | | 750-8214/xxx-xxx | UPDATE B: Available in Q1 2024 | | 750-8216/xxx-xxx | UPDATE B: Available in Q1 2024 | | 750-8217/xxx-xxx | UPDATE B: Available in Q1 2024 | ### Ethernet Controller 4th Generation Family – UPDATE B | Ord. No. | Firmware | |-----------------------|----------------------------------| | 750-823 | UPDATE B: Available in Q1 2024 | | 750-332 | UPDATE B: Available in Q1 2024 | | 750-832/xxx-xxx | UPDATE B: Available in Q1 2024 | | 750-862 | UPDATE B: Available in Q1 2024 | | 750-890/xxx-xxx | UPDATE B: Available in Q1 2024 | | 750-891 | UPDATE B: Available in Q1 2024 | | 750-893 | UPDATE B: Available in Q1 2024 | ### Ethernet Controller 3rd Generation Family – UPDATE B | Ord. No. | Firmware | |-----------------------|----------------------------------| | 750-331 | UPDATE B: Available in Q1 2024 | | 750-829 | UPDATE B: Available in Q1 2024 | | 750-831/xxx-xxx | UPDATE B: Available in Q1 2024 | | 750-852 | UPDATE B: Available in Q1 2024 | | 750-880/xxx-xxx | UPDATE B: Available in Q1 2024 | | 750-881 | UPDATE B: Available in Q1 2024 | | 750-882 | UPDATE B: Available in Q1 2024 | | 750-885/xxx-xxx | UPDATE B: Available in Q1 2024 | | 750-889 | UPDATE B: Available in Q1 2024 | ### Engineering Software | Name | Firmware | |------------------|----------------------------------| | WAGO-I/O-PRO 32 | UPDATE B: Available in Q1 2024 |
Fixed
WAGO recommends that all affected users with WAGO I/O-PRO/CODESYS 2.3 PLCs update to the firmware and use the latest version of WAGO I/O-Pro as soon as it is available. Until the updates are available, we recommend switching off the CODESYS IP port 2455 after commissioning or, if this not possible, use a strong admin password. ### PFC200 Family | Ord. No. | Firmware | |-----------------------|----------------------------------| | 750-8202/xxx-xxx | UPDATE B: Available in Q1 2024 | | 750-8203/xxx-xxx | UPDATE B: Available in Q1 2024 | | 750-8204/xxx-xxx | UPDATE B: Available in Q1 2024 | | 750-8206/xxx-xxx | UPDATE B: Available in Q1 2024 | | 750-8207/xxx-xxx | UPDATE B: Available in Q1 2024 | | 750-8208/xxx-xxx | UPDATE B: Available in Q1 2024 | | 750-8210/xxx-xxx | UPDATE B: Available in Q1 2024 | | 750-8211/xxx-xxx | UPDATE B: Available in Q1 2024 | | 750-8212/xxx-xxx | UPDATE B: Available in Q1 2024 | | 750-8213/xxx-xxx | UPDATE B: Available in Q1 2024 | | 750-8214/xxx-xxx | UPDATE B: Available in Q1 2024 | | 750-8216/xxx-xxx | UPDATE B: Available in Q1 2024 | | 750-8217/xxx-xxx | UPDATE B: Available in Q1 2024 | ### Ethernet Controller 4th Generation Family – UPDATE B | Ord. No. | Firmware | |-----------------------|----------------------------------| | 750-823 | UPDATE B: Available in Q1 2024 | | 750-332 | UPDATE B: Available in Q1 2024 | | 750-832/xxx-xxx | UPDATE B: Available in Q1 2024 | | 750-862 | UPDATE B: Available in Q1 2024 | | 750-890/xxx-xxx | UPDATE B: Available in Q1 2024 | | 750-891 | UPDATE B: Available in Q1 2024 | | 750-893 | UPDATE B: Available in Q1 2024 | ### Ethernet Controller 3rd Generation Family – UPDATE B | Ord. No. | Firmware | |-----------------------|----------------------------------| | 750-331 | UPDATE B: Available in Q1 2024 | | 750-829 | UPDATE B: Available in Q1 2024 | | 750-831/xxx-xxx | UPDATE B: Available in Q1 2024 | | 750-852 | UPDATE B: Available in Q1 2024 | | 750-880/xxx-xxx | UPDATE B: Available in Q1 2024 | | 750-881 | UPDATE B: Available in Q1 2024 | | 750-882 | UPDATE B: Available in Q1 2024 | | 750-885/xxx-xxx | UPDATE B: Available in Q1 2024 | | 750-889 | UPDATE B: Available in Q1 2024 | ### Engineering Software | Name | Firmware | |------------------|----------------------------------| | WAGO-I/O-PRO 32 | UPDATE B: Available in Q1 2024 |
Fixed
WAGO recommends that all affected users with WAGO I/O-PRO/CODESYS 2.3 PLCs update to the firmware and use the latest version of WAGO I/O-Pro as soon as it is available. Until the updates are available, we recommend switching off the CODESYS IP port 2455 after commissioning or, if this not possible, use a strong admin password. ### PFC200 Family | Ord. No. | Firmware | |-----------------------|----------------------------------| | 750-8202/xxx-xxx | UPDATE B: Available in Q1 2024 | | 750-8203/xxx-xxx | UPDATE B: Available in Q1 2024 | | 750-8204/xxx-xxx | UPDATE B: Available in Q1 2024 | | 750-8206/xxx-xxx | UPDATE B: Available in Q1 2024 | | 750-8207/xxx-xxx | UPDATE B: Available in Q1 2024 | | 750-8208/xxx-xxx | UPDATE B: Available in Q1 2024 | | 750-8210/xxx-xxx | UPDATE B: Available in Q1 2024 | | 750-8211/xxx-xxx | UPDATE B: Available in Q1 2024 | | 750-8212/xxx-xxx | UPDATE B: Available in Q1 2024 | | 750-8213/xxx-xxx | UPDATE B: Available in Q1 2024 | | 750-8214/xxx-xxx | UPDATE B: Available in Q1 2024 | | 750-8216/xxx-xxx | UPDATE B: Available in Q1 2024 | | 750-8217/xxx-xxx | UPDATE B: Available in Q1 2024 | ### Ethernet Controller 4th Generation Family – UPDATE B | Ord. No. | Firmware | |-----------------------|----------------------------------| | 750-823 | UPDATE B: Available in Q1 2024 | | 750-332 | UPDATE B: Available in Q1 2024 | | 750-832/xxx-xxx | UPDATE B: Available in Q1 2024 | | 750-862 | UPDATE B: Available in Q1 2024 | | 750-890/xxx-xxx | UPDATE B: Available in Q1 2024 | | 750-891 | UPDATE B: Available in Q1 2024 | | 750-893 | UPDATE B: Available in Q1 2024 | ### Ethernet Controller 3rd Generation Family – UPDATE B | Ord. No. | Firmware | |-----------------------|----------------------------------| | 750-331 | UPDATE B: Available in Q1 2024 | | 750-829 | UPDATE B: Available in Q1 2024 | | 750-831/xxx-xxx | UPDATE B: Available in Q1 2024 | | 750-852 | UPDATE B: Available in Q1 2024 | | 750-880/xxx-xxx | UPDATE B: Available in Q1 2024 | | 750-881 | UPDATE B: Available in Q1 2024 | | 750-882 | UPDATE B: Available in Q1 2024 | | 750-885/xxx-xxx | UPDATE B: Available in Q1 2024 | | 750-889 | UPDATE B: Available in Q1 2024 | ### Engineering Software | Name | Firmware | |------------------|----------------------------------| | WAGO-I/O-PRO 32 | UPDATE B: Available in Q1 2024 |
Fixed
WAGO recommends that all affected users with WAGO I/O-PRO/CODESYS 2.3 PLCs update to the firmware and use the latest version of WAGO I/O-Pro as soon as it is available. Until the updates are available, we recommend switching off the CODESYS IP port 2455 after commissioning or, if this not possible, use a strong admin password. ### PFC200 Family | Ord. No. | Firmware | |-----------------------|----------------------------------| | 750-8202/xxx-xxx | UPDATE B: Available in Q1 2024 | | 750-8203/xxx-xxx | UPDATE B: Available in Q1 2024 | | 750-8204/xxx-xxx | UPDATE B: Available in Q1 2024 | | 750-8206/xxx-xxx | UPDATE B: Available in Q1 2024 | | 750-8207/xxx-xxx | UPDATE B: Available in Q1 2024 | | 750-8208/xxx-xxx | UPDATE B: Available in Q1 2024 | | 750-8210/xxx-xxx | UPDATE B: Available in Q1 2024 | | 750-8211/xxx-xxx | UPDATE B: Available in Q1 2024 | | 750-8212/xxx-xxx | UPDATE B: Available in Q1 2024 | | 750-8213/xxx-xxx | UPDATE B: Available in Q1 2024 | | 750-8214/xxx-xxx | UPDATE B: Available in Q1 2024 | | 750-8216/xxx-xxx | UPDATE B: Available in Q1 2024 | | 750-8217/xxx-xxx | UPDATE B: Available in Q1 2024 | ### Ethernet Controller 4th Generation Family – UPDATE B | Ord. No. | Firmware | |-----------------------|----------------------------------| | 750-823 | UPDATE B: Available in Q1 2024 | | 750-332 | UPDATE B: Available in Q1 2024 | | 750-832/xxx-xxx | UPDATE B: Available in Q1 2024 | | 750-862 | UPDATE B: Available in Q1 2024 | | 750-890/xxx-xxx | UPDATE B: Available in Q1 2024 | | 750-891 | UPDATE B: Available in Q1 2024 | | 750-893 | UPDATE B: Available in Q1 2024 | ### Ethernet Controller 3rd Generation Family – UPDATE B | Ord. No. | Firmware | |-----------------------|----------------------------------| | 750-331 | UPDATE B: Available in Q1 2024 | | 750-829 | UPDATE B: Available in Q1 2024 | | 750-831/xxx-xxx | UPDATE B: Available in Q1 2024 | | 750-852 | UPDATE B: Available in Q1 2024 | | 750-880/xxx-xxx | UPDATE B: Available in Q1 2024 | | 750-881 | UPDATE B: Available in Q1 2024 | | 750-882 | UPDATE B: Available in Q1 2024 | | 750-885/xxx-xxx | UPDATE B: Available in Q1 2024 | | 750-889 | UPDATE B: Available in Q1 2024 | ### Engineering Software | Name | Firmware | |------------------|----------------------------------| | WAGO-I/O-PRO 32 | UPDATE B: Available in Q1 2024 |
Fixed
WAGO recommends that all affected users with WAGO I/O-PRO/CODESYS 2.3 PLCs update to the firmware and use the latest version of WAGO I/O-Pro as soon as it is available. Until the updates are available, we recommend switching off the CODESYS IP port 2455 after commissioning or, if this not possible, use a strong admin password. ### PFC200 Family | Ord. No. | Firmware | |-----------------------|----------------------------------| | 750-8202/xxx-xxx | UPDATE B: Available in Q1 2024 | | 750-8203/xxx-xxx | UPDATE B: Available in Q1 2024 | | 750-8204/xxx-xxx | UPDATE B: Available in Q1 2024 | | 750-8206/xxx-xxx | UPDATE B: Available in Q1 2024 | | 750-8207/xxx-xxx | UPDATE B: Available in Q1 2024 | | 750-8208/xxx-xxx | UPDATE B: Available in Q1 2024 | | 750-8210/xxx-xxx | UPDATE B: Available in Q1 2024 | | 750-8211/xxx-xxx | UPDATE B: Available in Q1 2024 | | 750-8212/xxx-xxx | UPDATE B: Available in Q1 2024 | | 750-8213/xxx-xxx | UPDATE B: Available in Q1 2024 | | 750-8214/xxx-xxx | UPDATE B: Available in Q1 2024 | | 750-8216/xxx-xxx | UPDATE B: Available in Q1 2024 | | 750-8217/xxx-xxx | UPDATE B: Available in Q1 2024 | ### Ethernet Controller 4th Generation Family – UPDATE B | Ord. No. | Firmware | |-----------------------|----------------------------------| | 750-823 | UPDATE B: Available in Q1 2024 | | 750-332 | UPDATE B: Available in Q1 2024 | | 750-832/xxx-xxx | UPDATE B: Available in Q1 2024 | | 750-862 | UPDATE B: Available in Q1 2024 | | 750-890/xxx-xxx | UPDATE B: Available in Q1 2024 | | 750-891 | UPDATE B: Available in Q1 2024 | | 750-893 | UPDATE B: Available in Q1 2024 | ### Ethernet Controller 3rd Generation Family – UPDATE B | Ord. No. | Firmware | |-----------------------|----------------------------------| | 750-331 | UPDATE B: Available in Q1 2024 | | 750-829 | UPDATE B: Available in Q1 2024 | | 750-831/xxx-xxx | UPDATE B: Available in Q1 2024 | | 750-852 | UPDATE B: Available in Q1 2024 | | 750-880/xxx-xxx | UPDATE B: Available in Q1 2024 | | 750-881 | UPDATE B: Available in Q1 2024 | | 750-882 | UPDATE B: Available in Q1 2024 | | 750-885/xxx-xxx | UPDATE B: Available in Q1 2024 | | 750-889 | UPDATE B: Available in Q1 2024 | ### Engineering Software | Name | Firmware | |------------------|----------------------------------| | WAGO-I/O-PRO 32 | UPDATE B: Available in Q1 2024 |
Fixed
WAGO recommends that all affected users with WAGO I/O-PRO/CODESYS 2.3 PLCs update to the firmware and use the latest version of WAGO I/O-Pro as soon as it is available. Until the updates are available, we recommend switching off the CODESYS IP port 2455 after commissioning or, if this not possible, use a strong admin password. ### PFC200 Family | Ord. No. | Firmware | |-----------------------|----------------------------------| | 750-8202/xxx-xxx | UPDATE B: Available in Q1 2024 | | 750-8203/xxx-xxx | UPDATE B: Available in Q1 2024 | | 750-8204/xxx-xxx | UPDATE B: Available in Q1 2024 | | 750-8206/xxx-xxx | UPDATE B: Available in Q1 2024 | | 750-8207/xxx-xxx | UPDATE B: Available in Q1 2024 | | 750-8208/xxx-xxx | UPDATE B: Available in Q1 2024 | | 750-8210/xxx-xxx | UPDATE B: Available in Q1 2024 | | 750-8211/xxx-xxx | UPDATE B: Available in Q1 2024 | | 750-8212/xxx-xxx | UPDATE B: Available in Q1 2024 | | 750-8213/xxx-xxx | UPDATE B: Available in Q1 2024 | | 750-8214/xxx-xxx | UPDATE B: Available in Q1 2024 | | 750-8216/xxx-xxx | UPDATE B: Available in Q1 2024 | | 750-8217/xxx-xxx | UPDATE B: Available in Q1 2024 | ### Ethernet Controller 4th Generation Family – UPDATE B | Ord. No. | Firmware | |-----------------------|----------------------------------| | 750-823 | UPDATE B: Available in Q1 2024 | | 750-332 | UPDATE B: Available in Q1 2024 | | 750-832/xxx-xxx | UPDATE B: Available in Q1 2024 | | 750-862 | UPDATE B: Available in Q1 2024 | | 750-890/xxx-xxx | UPDATE B: Available in Q1 2024 | | 750-891 | UPDATE B: Available in Q1 2024 | | 750-893 | UPDATE B: Available in Q1 2024 | ### Ethernet Controller 3rd Generation Family – UPDATE B | Ord. No. | Firmware | |-----------------------|----------------------------------| | 750-331 | UPDATE B: Available in Q1 2024 | | 750-829 | UPDATE B: Available in Q1 2024 | | 750-831/xxx-xxx | UPDATE B: Available in Q1 2024 | | 750-852 | UPDATE B: Available in Q1 2024 | | 750-880/xxx-xxx | UPDATE B: Available in Q1 2024 | | 750-881 | UPDATE B: Available in Q1 2024 | | 750-882 | UPDATE B: Available in Q1 2024 | | 750-885/xxx-xxx | UPDATE B: Available in Q1 2024 | | 750-889 | UPDATE B: Available in Q1 2024 | ### Engineering Software | Name | Firmware | |------------------|----------------------------------| | WAGO-I/O-PRO 32 | UPDATE B: Available in Q1 2024 |
Fixed
WAGO recommends that all affected users with WAGO I/O-PRO/CODESYS 2.3 PLCs update to the firmware and use the latest version of WAGO I/O-Pro as soon as it is available. Until the updates are available, we recommend switching off the CODESYS IP port 2455 after commissioning or, if this not possible, use a strong admin password. ### PFC200 Family | Ord. No. | Firmware | |-----------------------|----------------------------------| | 750-8202/xxx-xxx | UPDATE B: Available in Q1 2024 | | 750-8203/xxx-xxx | UPDATE B: Available in Q1 2024 | | 750-8204/xxx-xxx | UPDATE B: Available in Q1 2024 | | 750-8206/xxx-xxx | UPDATE B: Available in Q1 2024 | | 750-8207/xxx-xxx | UPDATE B: Available in Q1 2024 | | 750-8208/xxx-xxx | UPDATE B: Available in Q1 2024 | | 750-8210/xxx-xxx | UPDATE B: Available in Q1 2024 | | 750-8211/xxx-xxx | UPDATE B: Available in Q1 2024 | | 750-8212/xxx-xxx | UPDATE B: Available in Q1 2024 | | 750-8213/xxx-xxx | UPDATE B: Available in Q1 2024 | | 750-8214/xxx-xxx | UPDATE B: Available in Q1 2024 | | 750-8216/xxx-xxx | UPDATE B: Available in Q1 2024 | | 750-8217/xxx-xxx | UPDATE B: Available in Q1 2024 | ### Ethernet Controller 4th Generation Family – UPDATE B | Ord. No. | Firmware | |-----------------------|----------------------------------| | 750-823 | UPDATE B: Available in Q1 2024 | | 750-332 | UPDATE B: Available in Q1 2024 | | 750-832/xxx-xxx | UPDATE B: Available in Q1 2024 | | 750-862 | UPDATE B: Available in Q1 2024 | | 750-890/xxx-xxx | UPDATE B: Available in Q1 2024 | | 750-891 | UPDATE B: Available in Q1 2024 | | 750-893 | UPDATE B: Available in Q1 2024 | ### Ethernet Controller 3rd Generation Family – UPDATE B | Ord. No. | Firmware | |-----------------------|----------------------------------| | 750-331 | UPDATE B: Available in Q1 2024 | | 750-829 | UPDATE B: Available in Q1 2024 | | 750-831/xxx-xxx | UPDATE B: Available in Q1 2024 | | 750-852 | UPDATE B: Available in Q1 2024 | | 750-880/xxx-xxx | UPDATE B: Available in Q1 2024 | | 750-881 | UPDATE B: Available in Q1 2024 | | 750-882 | UPDATE B: Available in Q1 2024 | | 750-885/xxx-xxx | UPDATE B: Available in Q1 2024 | | 750-889 | UPDATE B: Available in Q1 2024 | ### Engineering Software | Name | Firmware | |------------------|----------------------------------| | WAGO-I/O-PRO 32 | UPDATE B: Available in Q1 2024 |
Fixed
WAGO recommends that all affected users with WAGO I/O-PRO/CODESYS 2.3 PLCs update to the firmware and use the latest version of WAGO I/O-Pro as soon as it is available. Until the updates are available, we recommend switching off the CODESYS IP port 2455 after commissioning or, if this not possible, use a strong admin password. ### PFC200 Family | Ord. No. | Firmware | |-----------------------|----------------------------------| | 750-8202/xxx-xxx | UPDATE B: Available in Q1 2024 | | 750-8203/xxx-xxx | UPDATE B: Available in Q1 2024 | | 750-8204/xxx-xxx | UPDATE B: Available in Q1 2024 | | 750-8206/xxx-xxx | UPDATE B: Available in Q1 2024 | | 750-8207/xxx-xxx | UPDATE B: Available in Q1 2024 | | 750-8208/xxx-xxx | UPDATE B: Available in Q1 2024 | | 750-8210/xxx-xxx | UPDATE B: Available in Q1 2024 | | 750-8211/xxx-xxx | UPDATE B: Available in Q1 2024 | | 750-8212/xxx-xxx | UPDATE B: Available in Q1 2024 | | 750-8213/xxx-xxx | UPDATE B: Available in Q1 2024 | | 750-8214/xxx-xxx | UPDATE B: Available in Q1 2024 | | 750-8216/xxx-xxx | UPDATE B: Available in Q1 2024 | | 750-8217/xxx-xxx | UPDATE B: Available in Q1 2024 | ### Ethernet Controller 4th Generation Family – UPDATE B | Ord. No. | Firmware | |-----------------------|----------------------------------| | 750-823 | UPDATE B: Available in Q1 2024 | | 750-332 | UPDATE B: Available in Q1 2024 | | 750-832/xxx-xxx | UPDATE B: Available in Q1 2024 | | 750-862 | UPDATE B: Available in Q1 2024 | | 750-890/xxx-xxx | UPDATE B: Available in Q1 2024 | | 750-891 | UPDATE B: Available in Q1 2024 | | 750-893 | UPDATE B: Available in Q1 2024 | ### Ethernet Controller 3rd Generation Family – UPDATE B | Ord. No. | Firmware | |-----------------------|----------------------------------| | 750-331 | UPDATE B: Available in Q1 2024 | | 750-829 | UPDATE B: Available in Q1 2024 | | 750-831/xxx-xxx | UPDATE B: Available in Q1 2024 | | 750-852 | UPDATE B: Available in Q1 2024 | | 750-880/xxx-xxx | UPDATE B: Available in Q1 2024 | | 750-881 | UPDATE B: Available in Q1 2024 | | 750-882 | UPDATE B: Available in Q1 2024 | | 750-885/xxx-xxx | UPDATE B: Available in Q1 2024 | | 750-889 | UPDATE B: Available in Q1 2024 | ### Engineering Software | Name | Firmware | |------------------|----------------------------------| | WAGO-I/O-PRO 32 | UPDATE B: Available in Q1 2024 |

scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.

Free scan