VDE-2025-008

csafDEwago_psirt

WAGO: Vulnerabilities in CODESYS Control

Advisory ansehen veröffentlicht 2025-02-04

The following firmware versions installed on several devices are are vulnerable due to a vulnerability in CODESYS Control.

01

beschreibt (1)

Zugehörige CVEs.

IDSchweregrad ausnutzbar
CVE-2023-6357US——
A low-privileged remote attacker could exploit the vulnerability and inject additional system commands via file system libraries which could give the attacker full control of the d…
02

Referenzen

Externe Belege — Patches, Meldungen, Analysen.

03

Behebungen (48)

  • BehobenCustom Firmware <03.10.11(70) installed on WAGO PFC100 G1 0750-810x/xxxx-xxxx

    Update to Firmware version 27, Firmware 22 Patch 2. For the latest Custom Firmware version please contact the WAGO support.

  • BehobenCustom Firmware <03.10.11(70) installed on WAGO PFC200 G1 0750-820x/xxx-xxx

    Update to Firmware version 27, Firmware 22 Patch 2. For the latest Custom Firmware version please contact the WAGO support.

  • BehobenCustom Firmware <04.06.01(70) installed on WAGO Edge Controller 0752-8303/8000-0002

    Update to Firmware version 27, Firmware 22 Patch 2. For the latest Custom Firmware version please contact the WAGO support.

  • BehobenCustom Firmware <04.06.01(70) installed on WAGO PFC100 G2 0750-811x/xxxx-xxxx

    Update to Firmware version 27, Firmware 22 Patch 2. For the latest Custom Firmware version please contact the WAGO support.

  • BehobenCustom Firmware <04.06.01(70) installed on WAGO PFC200 G2 0750-821x/xxx-xxx

    Update to Firmware version 27, Firmware 22 Patch 2. For the latest Custom Firmware version please contact the WAGO support.

  • BehobenCustom Firmware <04.06.01(70) installed on WAGO TP600 0762-420x/8000-000x

    Update to Firmware version 27, Firmware 22 Patch 2. For the latest Custom Firmware version please contact the WAGO support.

  • BehobenCustom Firmware <04.06.01(70) installed on WAGO TP600 0762-430x/8000-000x

    Update to Firmware version 27, Firmware 22 Patch 2. For the latest Custom Firmware version please contact the WAGO support.

  • BehobenCustom Firmware <04.06.01(70) installed on WAGO TP600 0762-520x/8000-000x

    Update to Firmware version 27, Firmware 22 Patch 2. For the latest Custom Firmware version please contact the WAGO support.

  • BehobenCustom Firmware <04.06.01(70) installed on WAGO TP600 0762-530x/8000-000x

    Update to Firmware version 27, Firmware 22 Patch 2. For the latest Custom Firmware version please contact the WAGO support.

  • BehobenCustom Firmware <04.06.01(70) installed on WAGO TP600 0762-620x/8000-000x

    Update to Firmware version 27, Firmware 22 Patch 2. For the latest Custom Firmware version please contact the WAGO support.

  • BehobenCustom Firmware <04.06.01(70) installed on WAGO TP600 0762-630x/8000-000x

    Update to Firmware version 27, Firmware 22 Patch 2. For the latest Custom Firmware version please contact the WAGO support.

  • BehobenCustom Firmware <04.06.03(70) installed on WAGO CC100 0751/9x01

    Update to Firmware version 27, Firmware 22 Patch 2. For the latest Custom Firmware version please contact the WAGO support.

  • BehobenWAGO Firmware <3.10.11 (FW22 Patch 2) installed on WAGO PFC100 G1 0750-810x/xxxx-xxxx

    Update to Firmware version 27, Firmware 22 Patch 2. For the latest Custom Firmware version please contact the WAGO support.

  • BehobenWAGO Firmware <3.10.11 (FW22 Patch 2) installed on WAGO PFC200 G1 0750-820x/xxx-xxx

    Update to Firmware version 27, Firmware 22 Patch 2. For the latest Custom Firmware version please contact the WAGO support.

  • BehobenWAGO Firmware <4.5.10 (FW27) installed on WAGO CC100 0751/9x01

    Update to Firmware version 27, Firmware 22 Patch 2. For the latest Custom Firmware version please contact the WAGO support.

  • BehobenWAGO Firmware <4.5.10 (FW27) installed on WAGO Edge Controller 0752-8303/8000-0002

    Update to Firmware version 27, Firmware 22 Patch 2. For the latest Custom Firmware version please contact the WAGO support.

  • BehobenWAGO Firmware <4.5.10 (FW27) installed on WAGO PFC100 G2 0750-811x/xxxx-xxxx

    Update to Firmware version 27, Firmware 22 Patch 2. For the latest Custom Firmware version please contact the WAGO support.

  • BehobenWAGO Firmware <4.5.10 (FW27) installed on WAGO PFC200 G2 0750-821x/xxx-xxx

    Update to Firmware version 27, Firmware 22 Patch 2. For the latest Custom Firmware version please contact the WAGO support.

  • BehobenWAGO Firmware <4.5.10 (FW27) installed on WAGO TP600 0762-420x/8000-000x

    Update to Firmware version 27, Firmware 22 Patch 2. For the latest Custom Firmware version please contact the WAGO support.

  • BehobenWAGO Firmware <4.5.10 (FW27) installed on WAGO TP600 0762-430x/8000-000x

    Update to Firmware version 27, Firmware 22 Patch 2. For the latest Custom Firmware version please contact the WAGO support.

  • BehobenWAGO Firmware <4.5.10 (FW27) installed on WAGO TP600 0762-520x/8000-000x

    Update to Firmware version 27, Firmware 22 Patch 2. For the latest Custom Firmware version please contact the WAGO support.

  • BehobenWAGO Firmware <4.5.10 (FW27) installed on WAGO TP600 0762-530x/8000-000x

    Update to Firmware version 27, Firmware 22 Patch 2. For the latest Custom Firmware version please contact the WAGO support.

  • BehobenWAGO Firmware <4.5.10 (FW27) installed on WAGO TP600 0762-620x/8000-000x

    Update to Firmware version 27, Firmware 22 Patch 2. For the latest Custom Firmware version please contact the WAGO support.

  • BehobenWAGO Firmware <4.5.10 (FW27) installed on WAGO TP600 0762-630x/8000-000x

    Update to Firmware version 27, Firmware 22 Patch 2. For the latest Custom Firmware version please contact the WAGO support.

  • WorkaroundCustom Firmware <03.10.11(70) installed on WAGO PFC100 G1 0750-810x/xxxx-xxxx

    The vulnerability is only exploitable if the an attacker has successfully logged in with according user rights. To prevent attackers from exploiting the vulnerability it is recommend to change the standard password in the web based management.

  • WorkaroundCustom Firmware <03.10.11(70) installed on WAGO PFC200 G1 0750-820x/xxx-xxx

    The vulnerability is only exploitable if the an attacker has successfully logged in with according user rights. To prevent attackers from exploiting the vulnerability it is recommend to change the standard password in the web based management.

  • WorkaroundCustom Firmware <04.06.01(70) installed on WAGO Edge Controller 0752-8303/8000-0002

    The vulnerability is only exploitable if the an attacker has successfully logged in with according user rights. To prevent attackers from exploiting the vulnerability it is recommend to change the standard password in the web based management.

  • WorkaroundCustom Firmware <04.06.01(70) installed on WAGO PFC100 G2 0750-811x/xxxx-xxxx

    The vulnerability is only exploitable if the an attacker has successfully logged in with according user rights. To prevent attackers from exploiting the vulnerability it is recommend to change the standard password in the web based management.

  • WorkaroundCustom Firmware <04.06.01(70) installed on WAGO PFC200 G2 0750-821x/xxx-xxx

    The vulnerability is only exploitable if the an attacker has successfully logged in with according user rights. To prevent attackers from exploiting the vulnerability it is recommend to change the standard password in the web based management.

  • WorkaroundCustom Firmware <04.06.01(70) installed on WAGO TP600 0762-420x/8000-000x

    The vulnerability is only exploitable if the an attacker has successfully logged in with according user rights. To prevent attackers from exploiting the vulnerability it is recommend to change the standard password in the web based management.

  • WorkaroundCustom Firmware <04.06.01(70) installed on WAGO TP600 0762-430x/8000-000x

    The vulnerability is only exploitable if the an attacker has successfully logged in with according user rights. To prevent attackers from exploiting the vulnerability it is recommend to change the standard password in the web based management.

  • WorkaroundCustom Firmware <04.06.01(70) installed on WAGO TP600 0762-520x/8000-000x

    The vulnerability is only exploitable if the an attacker has successfully logged in with according user rights. To prevent attackers from exploiting the vulnerability it is recommend to change the standard password in the web based management.

  • WorkaroundCustom Firmware <04.06.01(70) installed on WAGO TP600 0762-530x/8000-000x

    The vulnerability is only exploitable if the an attacker has successfully logged in with according user rights. To prevent attackers from exploiting the vulnerability it is recommend to change the standard password in the web based management.

  • WorkaroundCustom Firmware <04.06.01(70) installed on WAGO TP600 0762-620x/8000-000x

    The vulnerability is only exploitable if the an attacker has successfully logged in with according user rights. To prevent attackers from exploiting the vulnerability it is recommend to change the standard password in the web based management.

  • WorkaroundCustom Firmware <04.06.01(70) installed on WAGO TP600 0762-630x/8000-000x

    The vulnerability is only exploitable if the an attacker has successfully logged in with according user rights. To prevent attackers from exploiting the vulnerability it is recommend to change the standard password in the web based management.

  • WorkaroundCustom Firmware <04.06.03(70) installed on WAGO CC100 0751/9x01

    The vulnerability is only exploitable if the an attacker has successfully logged in with according user rights. To prevent attackers from exploiting the vulnerability it is recommend to change the standard password in the web based management.

  • WorkaroundWAGO Firmware <3.10.11 (FW22 Patch 2) installed on WAGO PFC100 G1 0750-810x/xxxx-xxxx

    The vulnerability is only exploitable if the an attacker has successfully logged in with according user rights. To prevent attackers from exploiting the vulnerability it is recommend to change the standard password in the web based management.

  • WorkaroundWAGO Firmware <3.10.11 (FW22 Patch 2) installed on WAGO PFC200 G1 0750-820x/xxx-xxx

    The vulnerability is only exploitable if the an attacker has successfully logged in with according user rights. To prevent attackers from exploiting the vulnerability it is recommend to change the standard password in the web based management.

  • WorkaroundWAGO Firmware <4.5.10 (FW27) installed on WAGO CC100 0751/9x01

    The vulnerability is only exploitable if the an attacker has successfully logged in with according user rights. To prevent attackers from exploiting the vulnerability it is recommend to change the standard password in the web based management.

  • WorkaroundWAGO Firmware <4.5.10 (FW27) installed on WAGO Edge Controller 0752-8303/8000-0002

    The vulnerability is only exploitable if the an attacker has successfully logged in with according user rights. To prevent attackers from exploiting the vulnerability it is recommend to change the standard password in the web based management.

  • WorkaroundWAGO Firmware <4.5.10 (FW27) installed on WAGO PFC100 G2 0750-811x/xxxx-xxxx

    The vulnerability is only exploitable if the an attacker has successfully logged in with according user rights. To prevent attackers from exploiting the vulnerability it is recommend to change the standard password in the web based management.

  • WorkaroundWAGO Firmware <4.5.10 (FW27) installed on WAGO PFC200 G2 0750-821x/xxx-xxx

    The vulnerability is only exploitable if the an attacker has successfully logged in with according user rights. To prevent attackers from exploiting the vulnerability it is recommend to change the standard password in the web based management.

  • WorkaroundWAGO Firmware <4.5.10 (FW27) installed on WAGO TP600 0762-420x/8000-000x

    The vulnerability is only exploitable if the an attacker has successfully logged in with according user rights. To prevent attackers from exploiting the vulnerability it is recommend to change the standard password in the web based management.

  • WorkaroundWAGO Firmware <4.5.10 (FW27) installed on WAGO TP600 0762-430x/8000-000x

    The vulnerability is only exploitable if the an attacker has successfully logged in with according user rights. To prevent attackers from exploiting the vulnerability it is recommend to change the standard password in the web based management.

  • WorkaroundWAGO Firmware <4.5.10 (FW27) installed on WAGO TP600 0762-520x/8000-000x

    The vulnerability is only exploitable if the an attacker has successfully logged in with according user rights. To prevent attackers from exploiting the vulnerability it is recommend to change the standard password in the web based management.

  • WorkaroundWAGO Firmware <4.5.10 (FW27) installed on WAGO TP600 0762-530x/8000-000x

    The vulnerability is only exploitable if the an attacker has successfully logged in with according user rights. To prevent attackers from exploiting the vulnerability it is recommend to change the standard password in the web based management.

  • WorkaroundWAGO Firmware <4.5.10 (FW27) installed on WAGO TP600 0762-620x/8000-000x

    The vulnerability is only exploitable if the an attacker has successfully logged in with according user rights. To prevent attackers from exploiting the vulnerability it is recommend to change the standard password in the web based management.

  • WorkaroundWAGO Firmware <4.5.10 (FW27) installed on WAGO TP600 0762-630x/8000-000x

    The vulnerability is only exploitable if the an attacker has successfully logged in with according user rights. To prevent attackers from exploiting the vulnerability it is recommend to change the standard password in the web based management.

scry

Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.

Kostenloser Scan