WAGO: FTP-Server - Denial-of-Service
The FTP server does not properly release memory resources that were reserved for incomplete connection attempts by FTP clients. This could allow a remote attacker to generate a denial of service condition on devices that incorporate a vulnerable version of the FTP server.See also: Siemens Advisory published October 11th, 2022 - SSA-313313
beschreibt (1)
Zugehörige CVEs.
| ID | Schweregrad | ausnutzbar | ||
|---|---|---|---|---|
| CVE-2022-38371US | high7.5 | — | ||
A vulnerability has been identified in APOGEE MBC (PPC) (BACnet) (All versions), APOGEE MBC (PPC) (P2 Ethernet) (All versions), APOGEE MEC (PPC) (BACnet) (All versions), APOGEE MEC… | ||||
Referenzen
Externe Belege — Patches, Meldungen, Analysen.
Behebungen (2)
- Mitigation
If you enabled the FTP-Server, but you do not need FTP data transfer, you can deactivate the FTP Server over the product settings in the web-based management. As general security measures strongly WAGO recommends: 1. Use general security best practices to protect systems from local and network attacks. 2. Do not allow direct access to the device from untrusted networks. 3. Update to the latest firmware according to the table in chapter solutions. 4. Industrial control systems (ICS) should not be directly accessible from the Internet, but should be protected by consistently applying the defense-in-depth strategy. The BSI provides general information on securing ICS in the ICS Compendium (https://www.bsi.bund.de/SharedDocs/Downloads/EN/BSI/ICS/ICS-Security_compendium.pdf external link).
- Behoben
Wago recommends all effected users to update to the firmware version listed below: ### Series WAGO 750-3x / -8x | Article Number | Fixed Version | |-----------------------|----------------------------------| | 750-330 | Beta FW17 Q1/2023 | | 750-332 | FW11 after BACnet certification | | 750-352/xxx-xxx | FW17 Q1/2023 | | 750-362/xxx-xxx | FW11 Q1/2023 | | 750-363/xxx-xxx | FW11 Q1/2023 | | 750-364/xxx-xxx | FW11 Q1/2023 | | 750-365/xxx-xxx | FW11 Q1/2023 | | 750-823 | FW11 Q1/2023 | | 750-829 | Beta FW17 Q1/2023 | | 750-831/xxx-xxx | Beta FW17 Q1/2023 | | 750-832/xxx-xxx | FW11 after BACnet certification | | 750-852 | FW17 Q1/2023 | | 750-862 | FW11 Q1/2023 | | 750-880/xxx-xxx | FW17 Q1/2023 | | 750-881 | FW17 Q1/2023 | | 750-882 | FW17 Q1/2023 | | 750-885/xxx-xxx | FW17 Q1/2023 | | 750-889 | FW17 Q1/2023 | | 750-890/xxx-xxx | FW11 Q1/2023 | | 750-891 | FW11 Q1/2023 | | 750-893 | FW11 Q1/2023 |
Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan