WAGO: Multiple products - Loss of MAC-Address-Filtering after reboot
The MAC address filter as part of the firewall has a flaw, which prevents the MAC address filter to be active after restart. In this way a remote attacker is able to circumvent the MAC address filtering after a reboot of a device.
beschreibt (1)
Zugehörige CVEs.
| ID | Schweregrad | ausnutzbar | ||
|---|---|---|---|---|
| CVE-2022-3281US | — | — | ||
WAGO Series PFC100/PFC200, Series Touch Panel 600, Compact Controller CC100 and Edge Controller in multiple versions are prone to a loss of MAC-Address-Filtering after reboot. This… | ||||
Referenzen
Externe Belege — Patches, Meldungen, Analysen.
Behebungen (2)
- Mitigation
Reactivate MAC Address Filter after restart to make sure MAC Address Filter is working. To test if the MAC Address Filter is working just add a test-client to the MAC Address Filter list, enable it and check if you can access the web-based-management via the test-client.
- Behoben
We recommend all effected users to update to the firmware version listed below: ### **Serie WAGO PFC100/PFC200 and WAGO Compact Controller CC100** | Article Number | Fixed Firmware | |-----------------------|--------------------| | 750-81xx/xxx-xxx | 03.10.10(22) | | 750-8217/xxx-xxx | 03.10.10(22) | | 750-82xx/xxx-xxx | 03.10.10(22) | | 751-9301 | 04.01.10(23) | ### **Serie WAGO Touch Panel 600 and WAGO Edge Controller** | Article Number | Fixed Firmware | |-----------------------|--------------------| | 762-4xxx | 03.10.10(22) | | 762-5xxx | 03.10.10(22) | | 762-6xxx | 03.10.10(22) | | 752-8303/8000-002 | 03.10.10(22) |
Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan