CVE-2023-1150

highpriority · track · 0EPSS 0.009 · 61 %ileDEEURUUS
grimoire priorityP2 · Scheduled
Exploitable?
—
no known exploitation
Likely / severe?
0.93% (61st) EPSS
CVSS 7.5 · high
Is it mine?
55 products
Check your exposure
Who says so?
4 sources
cnnvd · enisa_euvd · fstec_bdu · wago_psirt

EPSS · scored 2026-10-28

Uncontrolled resource consumption in Series WAGO 750-3x/-8x products may allow an unauthenticated remote attacker to DoS the MODBUS server with specially crafted packets.

01

remediations

Vendor fix, mitigation, or workaround guidance, as published by each source.

A vendor fix is available.

  • Fixedwago_psirt

    We recommend all affected users to update to the firmware version listed below: ### Series WAGO 750-3x/-8x | Article Number | Fixed in Firmware Version | |----------------------|----------------------------------------| | 750-332 | FW11 after BACnet certification | | 750-362/xxx-xxx | FW11 Q3/2023 | | 750-363/xxx-xxx | FW11 Q3/2023 | | 750-364/xxx-xxx | FW11 Q3/2023 | | 750-365/xxx-xxx | FW11 Q3/2023 | | 750-823 | FW11 Q3/2023 | | 750-832/xxx-xxx | FW11 after BACnet certification | | 750-862 | FW11 Q1/2023 | | 750-890/xxx-xxx | FW11 Q3/2023 | | 750-891 | FW11 Q3/2023 | | 750-893 | FW11 Q3/2023 |

  • Mitigationwago_psirt

    In case no MODBUS communication is needed the MODBUS-Server should be deactivated in the product settings of the web-based management. As general security measures WAGO strongly recommends: 1. Use general security best practices to protect systems from local and network attacks. 2. Do not allow direct access to the device from untrusted networks. 3. Update to the latest firmware according to the table in chapter solutions. 4. Industrial control systems (ICS) should not be directly accessible from the Internet, but should be protected by consistently applying the defense-in-depth strategy. The BSI provides general information on securing ICS in the ICS Compendium (www.bsi.bund.de/SharedDocs/Downloads/EN/BSI/ICS/ICS-Security_compendium.pdf).

02

cvss

Technical severity, 0–10. One row per scoring source.

7.5
010

base score 0–10 · higher = more severe · hover a vector to decode⚠ sources disagree · medium–high · 6.9–7.5

v3.17.5highAV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:Hsecondary · FSTEC (BDU) RU
v3.17.5highCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:Hsecondary · ENISA EU
v3.17.5highCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:Hsecondary · info@cert.vde.comexploitability 3.9 · impact 3.6
v3.17.5highCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:Hsecondary · WAGO PSIRT DE
v3.16.9mediumCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:Usecondary · CVSS-BT (t0sche)
03

ssvc

A stakeholder decision — act, attend, or track — from exploitation and impact.

Exploitation: none · Automatable: yes · Technical Impact: partialcoordinatorcisa_ssvcUS
04

weaknesses

The CWE weakness classes this flaw belongs to.

CWE-400USCWE-772USCWE-772US
05

affected products (55)

Products and version ranges known to be affected.

showing 20 of 55
06

advisories (1)

Vendor and ecosystem advisories describing this.

  • VDE-2023-005WAGO: Series 750-3x/-8x prone to MODBUS server DoS2023-06-25csaf · wago_psirtDE

    An unauthenticated attacker with network access to port 502/TCP of the target device can cause a denial-of-service condition by sending multiple specially crafted packets. The MODBUS server does not properly release memory resources that were reserved for incomplete connection attempts by MODBUS clients. This could allow a remote attacker to generate a denial of service condition on devices that incorporate a vulnerable version of the MODBUS server.

07

also known as (4)

Other names and identifiers for this entity.

08

sources

Which sources assert this record, and when.

cnnvdenisa_euvdfstec_bduwago_psirtNVDCVE.orgMITRE
published 2023-06-26modified 2026-06-17
09

references (5)

External citations — patches, advisories, analysis.

scry

Attackers weaponise vulnerabilities like this against internet-exposed services. See what is exposed on your perimeter with a free passive scan.

Free scan