WAGO Series 750-88x and 750-352 (Update A)
Advisory ansehen veröffentlicht 2020-11-03
Successful exploitation of this vulnerability could allow an attacker to crash the device being accessed using a denial-of-service attack.
01
beschreibt (1)
Zugehörige CVEs.
| ID | Schweregrad | ausnutzbar | ||
|---|---|---|---|---|
| CVE-2020-12516US | high7.5 | — | ||
Older firmware versions (FW1 up to FW10) of the WAGO PLC family 750-88x and 750-352 are vulnerable for a special denial of service attack. | ||||
02
Referenzen
Externe Belege — Patches, Meldungen, Analysen.
- ICS Advisory ICSA-20-308-01 JSONself
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
03
Behebungen (10)
- Mitigation750-331/xxx-xxx
Disable unused TCP/UDP ports.
- Mitigation750-352
Disable unused TCP/UDP ports.
- Mitigation750-829
Disable unused TCP/UDP ports.
- Mitigation750-831/xxx-xxx
Disable unused TCP/UDP ports.
- Mitigation750-852
Disable unused TCP/UDP ports.
- Mitigation750-880/xxx-xxx
Disable unused TCP/UDP ports.
- Mitigation750-881
Disable unused TCP/UDP ports.
- Mitigation750-882
Disable unused TCP/UDP ports.
- Mitigation750-885
Disable unused TCP/UDP ports.
- Mitigation750-889
Disable unused TCP/UDP ports.
scry
Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan