CVE-2023-1620 - CVE House

Status published Medium CVE-2023-1620

WAGO: DoS in multiple products in multiple versions using Codesys

4.9 CVSS

Vulnerability Description

Multiple WAGO devices in multiple versions may allow an authenticated remote attacker with high privileges to DoS the device by sending a specifically crafted packet to the CODESYS V2 runtime.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2023-1620

Check My Exposure

Credits & Attribution

The following person or organization is credited with identifying this vulnerability, as recorded in the NVD database:

Daniel dos Santos from Forescout
Abdelrahman Hassanien from Forescout

References

https://cert.vde.com/en/advisories/VDE-2023-006/

More from Wago

View All →

CVE-2023-5872

Wago: Vulnerability in Smart Designer Web-Application

Medium 4.3

CVE-2023-1619

WAGO: DoS in multiple versions of multiple products

Medium 4.9

CVE-2022-50926

WAGO 750-8212 PFC200 G2 2ETH RS Privilege Escalation

High 8.7

CVE-2019-5182

An exploitable stack buffer overflow vulnerability vulnerability exists in the...

Medium 5.5

CVE-2019-5181

An exploitable stack buffer overflow vulnerability vulnerability exists in the...

High 7.8

Affected Vendor

Wago

View all reports →

Affected Software

750-8202/xxx-xxx, 750-8203/xxx-xxx, 750-8204/xxx-xxx, 750-8206/xxx-xxx, 750-8207/xxx-xxx, 750-8208/xxx-xxx, 750-8210/xxx-xxx, 750-8211/xxx-xxx, 750-8212/xxx-xxx, 750-8213/xxx-xxx, 750-8214/xxx-xxx, 750-8216/xxx-xxx, 750-8217/xxx-xxx, 750-823, 750-332, 750-832/xxx-xxx, 750-862, 750-890/xxx-xxx, 750-891, 750-893, 750-331, 750-829, 750-831/xxx-xxx, 750-852, 750-880/xxx-xxx, 750-881, 750-882, 750-885/xxx-xxx, 750-889

Vulnerable Versions:

FW1

Timeline

Official Publish: June 26th, 2023

Last Modified: November 12th, 2024

Added to House: July 22nd, 2026

CVSS Vectors

V3: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H

Weaknesses (CWE)

CWE-1288

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.