VDE-2025-008

csafDEwago_psirt

WAGO: Vulnerabilities in CODESYS Control

view advisory published 2025-02-04

The following firmware versions installed on several devices are are vulnerable due to a vulnerability in CODESYS Control.

01

describes (1)

Related CVEs.

IDseverity exploitable
CVE-2023-6357US——
A low-privileged remote attacker could exploit the vulnerability and inject additional system commands via file system libraries which could give the attacker full control of the d…
02

references

External citations — patches, advisories, analysis.

03

remediations (48)

  • FixedCustom Firmware <03.10.11(70) installed on WAGO PFC100 G1 0750-810x/xxxx-xxxx

    Update to Firmware version 27, Firmware 22 Patch 2. For the latest Custom Firmware version please contact the WAGO support.

  • FixedCustom Firmware <03.10.11(70) installed on WAGO PFC200 G1 0750-820x/xxx-xxx

    Update to Firmware version 27, Firmware 22 Patch 2. For the latest Custom Firmware version please contact the WAGO support.

  • FixedCustom Firmware <04.06.01(70) installed on WAGO Edge Controller 0752-8303/8000-0002

    Update to Firmware version 27, Firmware 22 Patch 2. For the latest Custom Firmware version please contact the WAGO support.

  • FixedCustom Firmware <04.06.01(70) installed on WAGO PFC100 G2 0750-811x/xxxx-xxxx

    Update to Firmware version 27, Firmware 22 Patch 2. For the latest Custom Firmware version please contact the WAGO support.

  • FixedCustom Firmware <04.06.01(70) installed on WAGO PFC200 G2 0750-821x/xxx-xxx

    Update to Firmware version 27, Firmware 22 Patch 2. For the latest Custom Firmware version please contact the WAGO support.

  • FixedCustom Firmware <04.06.01(70) installed on WAGO TP600 0762-420x/8000-000x

    Update to Firmware version 27, Firmware 22 Patch 2. For the latest Custom Firmware version please contact the WAGO support.

  • FixedCustom Firmware <04.06.01(70) installed on WAGO TP600 0762-430x/8000-000x

    Update to Firmware version 27, Firmware 22 Patch 2. For the latest Custom Firmware version please contact the WAGO support.

  • FixedCustom Firmware <04.06.01(70) installed on WAGO TP600 0762-520x/8000-000x

    Update to Firmware version 27, Firmware 22 Patch 2. For the latest Custom Firmware version please contact the WAGO support.

  • FixedCustom Firmware <04.06.01(70) installed on WAGO TP600 0762-530x/8000-000x

    Update to Firmware version 27, Firmware 22 Patch 2. For the latest Custom Firmware version please contact the WAGO support.

  • FixedCustom Firmware <04.06.01(70) installed on WAGO TP600 0762-620x/8000-000x

    Update to Firmware version 27, Firmware 22 Patch 2. For the latest Custom Firmware version please contact the WAGO support.

  • FixedCustom Firmware <04.06.01(70) installed on WAGO TP600 0762-630x/8000-000x

    Update to Firmware version 27, Firmware 22 Patch 2. For the latest Custom Firmware version please contact the WAGO support.

  • FixedCustom Firmware <04.06.03(70) installed on WAGO CC100 0751/9x01

    Update to Firmware version 27, Firmware 22 Patch 2. For the latest Custom Firmware version please contact the WAGO support.

  • FixedWAGO Firmware <3.10.11 (FW22 Patch 2) installed on WAGO PFC100 G1 0750-810x/xxxx-xxxx

    Update to Firmware version 27, Firmware 22 Patch 2. For the latest Custom Firmware version please contact the WAGO support.

  • FixedWAGO Firmware <3.10.11 (FW22 Patch 2) installed on WAGO PFC200 G1 0750-820x/xxx-xxx

    Update to Firmware version 27, Firmware 22 Patch 2. For the latest Custom Firmware version please contact the WAGO support.

  • FixedWAGO Firmware <4.5.10 (FW27) installed on WAGO CC100 0751/9x01

    Update to Firmware version 27, Firmware 22 Patch 2. For the latest Custom Firmware version please contact the WAGO support.

  • FixedWAGO Firmware <4.5.10 (FW27) installed on WAGO Edge Controller 0752-8303/8000-0002

    Update to Firmware version 27, Firmware 22 Patch 2. For the latest Custom Firmware version please contact the WAGO support.

  • FixedWAGO Firmware <4.5.10 (FW27) installed on WAGO PFC100 G2 0750-811x/xxxx-xxxx

    Update to Firmware version 27, Firmware 22 Patch 2. For the latest Custom Firmware version please contact the WAGO support.

  • FixedWAGO Firmware <4.5.10 (FW27) installed on WAGO PFC200 G2 0750-821x/xxx-xxx

    Update to Firmware version 27, Firmware 22 Patch 2. For the latest Custom Firmware version please contact the WAGO support.

  • FixedWAGO Firmware <4.5.10 (FW27) installed on WAGO TP600 0762-420x/8000-000x

    Update to Firmware version 27, Firmware 22 Patch 2. For the latest Custom Firmware version please contact the WAGO support.

  • FixedWAGO Firmware <4.5.10 (FW27) installed on WAGO TP600 0762-430x/8000-000x

    Update to Firmware version 27, Firmware 22 Patch 2. For the latest Custom Firmware version please contact the WAGO support.

  • FixedWAGO Firmware <4.5.10 (FW27) installed on WAGO TP600 0762-520x/8000-000x

    Update to Firmware version 27, Firmware 22 Patch 2. For the latest Custom Firmware version please contact the WAGO support.

  • FixedWAGO Firmware <4.5.10 (FW27) installed on WAGO TP600 0762-530x/8000-000x

    Update to Firmware version 27, Firmware 22 Patch 2. For the latest Custom Firmware version please contact the WAGO support.

  • FixedWAGO Firmware <4.5.10 (FW27) installed on WAGO TP600 0762-620x/8000-000x

    Update to Firmware version 27, Firmware 22 Patch 2. For the latest Custom Firmware version please contact the WAGO support.

  • FixedWAGO Firmware <4.5.10 (FW27) installed on WAGO TP600 0762-630x/8000-000x

    Update to Firmware version 27, Firmware 22 Patch 2. For the latest Custom Firmware version please contact the WAGO support.

  • WorkaroundCustom Firmware <03.10.11(70) installed on WAGO PFC100 G1 0750-810x/xxxx-xxxx

    The vulnerability is only exploitable if the an attacker has successfully logged in with according user rights. To prevent attackers from exploiting the vulnerability it is recommend to change the standard password in the web based management.

  • WorkaroundCustom Firmware <03.10.11(70) installed on WAGO PFC200 G1 0750-820x/xxx-xxx

    The vulnerability is only exploitable if the an attacker has successfully logged in with according user rights. To prevent attackers from exploiting the vulnerability it is recommend to change the standard password in the web based management.

  • WorkaroundCustom Firmware <04.06.01(70) installed on WAGO Edge Controller 0752-8303/8000-0002

    The vulnerability is only exploitable if the an attacker has successfully logged in with according user rights. To prevent attackers from exploiting the vulnerability it is recommend to change the standard password in the web based management.

  • WorkaroundCustom Firmware <04.06.01(70) installed on WAGO PFC100 G2 0750-811x/xxxx-xxxx

    The vulnerability is only exploitable if the an attacker has successfully logged in with according user rights. To prevent attackers from exploiting the vulnerability it is recommend to change the standard password in the web based management.

  • WorkaroundCustom Firmware <04.06.01(70) installed on WAGO PFC200 G2 0750-821x/xxx-xxx

    The vulnerability is only exploitable if the an attacker has successfully logged in with according user rights. To prevent attackers from exploiting the vulnerability it is recommend to change the standard password in the web based management.

  • WorkaroundCustom Firmware <04.06.01(70) installed on WAGO TP600 0762-420x/8000-000x

    The vulnerability is only exploitable if the an attacker has successfully logged in with according user rights. To prevent attackers from exploiting the vulnerability it is recommend to change the standard password in the web based management.

  • WorkaroundCustom Firmware <04.06.01(70) installed on WAGO TP600 0762-430x/8000-000x

    The vulnerability is only exploitable if the an attacker has successfully logged in with according user rights. To prevent attackers from exploiting the vulnerability it is recommend to change the standard password in the web based management.

  • WorkaroundCustom Firmware <04.06.01(70) installed on WAGO TP600 0762-520x/8000-000x

    The vulnerability is only exploitable if the an attacker has successfully logged in with according user rights. To prevent attackers from exploiting the vulnerability it is recommend to change the standard password in the web based management.

  • WorkaroundCustom Firmware <04.06.01(70) installed on WAGO TP600 0762-530x/8000-000x

    The vulnerability is only exploitable if the an attacker has successfully logged in with according user rights. To prevent attackers from exploiting the vulnerability it is recommend to change the standard password in the web based management.

  • WorkaroundCustom Firmware <04.06.01(70) installed on WAGO TP600 0762-620x/8000-000x

    The vulnerability is only exploitable if the an attacker has successfully logged in with according user rights. To prevent attackers from exploiting the vulnerability it is recommend to change the standard password in the web based management.

  • WorkaroundCustom Firmware <04.06.01(70) installed on WAGO TP600 0762-630x/8000-000x

    The vulnerability is only exploitable if the an attacker has successfully logged in with according user rights. To prevent attackers from exploiting the vulnerability it is recommend to change the standard password in the web based management.

  • WorkaroundCustom Firmware <04.06.03(70) installed on WAGO CC100 0751/9x01

    The vulnerability is only exploitable if the an attacker has successfully logged in with according user rights. To prevent attackers from exploiting the vulnerability it is recommend to change the standard password in the web based management.

  • WorkaroundWAGO Firmware <3.10.11 (FW22 Patch 2) installed on WAGO PFC100 G1 0750-810x/xxxx-xxxx

    The vulnerability is only exploitable if the an attacker has successfully logged in with according user rights. To prevent attackers from exploiting the vulnerability it is recommend to change the standard password in the web based management.

  • WorkaroundWAGO Firmware <3.10.11 (FW22 Patch 2) installed on WAGO PFC200 G1 0750-820x/xxx-xxx

    The vulnerability is only exploitable if the an attacker has successfully logged in with according user rights. To prevent attackers from exploiting the vulnerability it is recommend to change the standard password in the web based management.

  • WorkaroundWAGO Firmware <4.5.10 (FW27) installed on WAGO CC100 0751/9x01

    The vulnerability is only exploitable if the an attacker has successfully logged in with according user rights. To prevent attackers from exploiting the vulnerability it is recommend to change the standard password in the web based management.

  • WorkaroundWAGO Firmware <4.5.10 (FW27) installed on WAGO Edge Controller 0752-8303/8000-0002

    The vulnerability is only exploitable if the an attacker has successfully logged in with according user rights. To prevent attackers from exploiting the vulnerability it is recommend to change the standard password in the web based management.

  • WorkaroundWAGO Firmware <4.5.10 (FW27) installed on WAGO PFC100 G2 0750-811x/xxxx-xxxx

    The vulnerability is only exploitable if the an attacker has successfully logged in with according user rights. To prevent attackers from exploiting the vulnerability it is recommend to change the standard password in the web based management.

  • WorkaroundWAGO Firmware <4.5.10 (FW27) installed on WAGO PFC200 G2 0750-821x/xxx-xxx

    The vulnerability is only exploitable if the an attacker has successfully logged in with according user rights. To prevent attackers from exploiting the vulnerability it is recommend to change the standard password in the web based management.

  • WorkaroundWAGO Firmware <4.5.10 (FW27) installed on WAGO TP600 0762-420x/8000-000x

    The vulnerability is only exploitable if the an attacker has successfully logged in with according user rights. To prevent attackers from exploiting the vulnerability it is recommend to change the standard password in the web based management.

  • WorkaroundWAGO Firmware <4.5.10 (FW27) installed on WAGO TP600 0762-430x/8000-000x

    The vulnerability is only exploitable if the an attacker has successfully logged in with according user rights. To prevent attackers from exploiting the vulnerability it is recommend to change the standard password in the web based management.

  • WorkaroundWAGO Firmware <4.5.10 (FW27) installed on WAGO TP600 0762-520x/8000-000x

    The vulnerability is only exploitable if the an attacker has successfully logged in with according user rights. To prevent attackers from exploiting the vulnerability it is recommend to change the standard password in the web based management.

  • WorkaroundWAGO Firmware <4.5.10 (FW27) installed on WAGO TP600 0762-530x/8000-000x

    The vulnerability is only exploitable if the an attacker has successfully logged in with according user rights. To prevent attackers from exploiting the vulnerability it is recommend to change the standard password in the web based management.

  • WorkaroundWAGO Firmware <4.5.10 (FW27) installed on WAGO TP600 0762-620x/8000-000x

    The vulnerability is only exploitable if the an attacker has successfully logged in with according user rights. To prevent attackers from exploiting the vulnerability it is recommend to change the standard password in the web based management.

  • WorkaroundWAGO Firmware <4.5.10 (FW27) installed on WAGO TP600 0762-630x/8000-000x

    The vulnerability is only exploitable if the an attacker has successfully logged in with according user rights. To prevent attackers from exploiting the vulnerability it is recommend to change the standard password in the web based management.

scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.

Free scan