WAGO: Multiple products affected by Terrapin
Several WAGO Firmwares are vulnerable to a to a remote attack which allows to bypass the integrity check through OpenSSH. This called Terrapin attack occurs because of mishandled handshake phase.
describes (1)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2023-48795US | medium5.9OT high | Exploit | ||
The SSH transport protocol with certain OpenSSH extensions, found in OpenSSH before 9.6 and other products, allows remote attackers to bypass integrity checks such that some packet… | ||||
references
External citations — patches, advisories, analysis.
remediations (1)
- Fixed
A fix for the affected Firmwares will be provided with the following firmware versions: - FW22, Patch 2 installed on 750-810x - FW22, Patch 2 installed on 750-821x - FW22, Patch 2 installed on 762-4x0x - FW22, Patch 2 installed on 762-5x0x - FW22, Patch 2 installed on 762-6x0x - FW22, Patch 2 installed on 752-8303 - FW27 installed on 750-811x - FW27 installed on 750-821x - FW27 installed on 751-9301 - FW27 installed on 751-9401 - FW27 installed on 762-4x0x - FW27 installed on 762-5x0x - FW27 installed on 762-6x0x - FW27 installed on 752-8303 - Custom Firmware 03.03.08 (80) installed on 750-820x - Custom Firmware 04.03.03 (72) installed on 751-9301 - Custom Firmware 04.03.03 (72) installed on 751-9401 - Custom Firmware 04.04.03 (70) installed on 750-821x
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan