WAGO: Multiple Vulnerabilities in I/O-Check Service
Multiple vulnerabilities in the WAGO I/O-Check Service were reported.
beschreibt (4)
Zugehörige CVEs.
| ID | Schweregrad | ausnutzbar | ||
|---|---|---|---|---|
| CVE-2021-34569US | — | — | ||
In WAGO I/O-Check Service in multiple products an attacker can send a specially crafted packet containing OS commands to crash the diagnostic tool and write memory. | ||||
| CVE-2021-34568US | — | — | ||
In WAGO I/O-Check Service in multiple products an unauthenticated remote attacker can send a specially crafted packet containing OS commands to provoke a denial of service. | ||||
| CVE-2021-34567US | — | — | ||
In WAGO I/O-Check Service in multiple products an unauthenticated remote attacker can send a specially crafted packet containing OS commands to provoke a denial of service and an l… | ||||
| CVE-2021-34566US | — | — | ||
In WAGO I/O-Check Service in multiple products an unauthenticated remote attacker can send a specially crafted packet containing OS commands to crash the iocheck process and write… | ||||
Referenzen
Externe Belege — Patches, Meldungen, Analysen.
Behebungen (8)
- Mitigation
- Disable I/O-Check service - Restrict network access to the device. - Do not directly connect the device to the internet.
- Mitigation
- Disable I/O-Check service - Restrict network access to the device. - Do not directly connect the device to the internet.
- Mitigation
- Disable I/O-Check service - Restrict network access to the device. - Do not directly connect the device to the internet.
- Mitigation
- Disable I/O-Check service - Restrict network access to the device. - Do not directly connect the device to the internet.
- Behoben
The I/O-Check service protocol is only needed during installation and commissioning, not during normal operations. It is highly recommended to disable the I/O-Check service after commissioning. This is the easiest and securest way to protect your device from the listed vulnerabilities and possible upcoming zero-day exploits. Regardless to the action described above, the vulnerability has been fixed in FW18Patch3, released in June 2021. We recommend all affected users to update to the latest firmware version.
- Behoben
The I/O-Check service protocol is only needed during installation and commissioning, not during normal operations. It is highly recommended to disable the I/O-Check service after commissioning. This is the easiest and securest way to protect your device from the listed vulnerabilities and possible upcoming zero-day exploits. Regardless to the action described above, the vulnerability has been fixed in FW18Patch3, released in June 2021. We recommend all affected users to update to the latest firmware version.
- Behoben
The I/O-Check service protocol is only needed during installation and commissioning, not during normal operations. It is highly recommended to disable the I/O-Check service after commissioning. This is the easiest and securest way to protect your device from the listed vulnerabilities and possible upcoming zero-day exploits. Regardless to the action described above, the vulnerability has been fixed in FW18Patch3, released in June 2021. We recommend all affected users to update to the latest firmware version.
- Behoben
The I/O-Check service protocol is only needed during installation and commissioning, not during normal operations. It is highly recommended to disable the I/O-Check service after commissioning. This is the easiest and securest way to protect your device from the listed vulnerabilities and possible upcoming zero-day exploits. Regardless to the action described above, the vulnerability has been fixed in FW18Patch3, released in June 2021. We recommend all affected users to update to the latest firmware version.
Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan