Skip to content
OpenAdvisories
High VDE-2022-042 1 CVE

WAGO: Multiple products - Loss of MAC-Address-Filtering after reboot

Published Oct 17, 2022 · Updated Oct 17, 2022

Summary

The MAC address filter as part of the firewall has a flaw, which prevents the MAC address filter to be active after restart. In this way a remote attacker is able to circumvent the MAC address filtering after a reboot of a device.

Details

Impact
Exploiting this flaw, an remote attacker is able to reach the network which should be protected by the MAC address filter.

Mitigation
Reactivate MAC Address Filter after restart to make sure MAC Address Filter is working. To test if the MAC Address Filter is working just add a test-client to the MAC Address Filter list, enable it and check if you can access the web-based-management via the test-client.

Remediation
We recommend all effected users to update to the firmware version listed below:

### **Serie WAGO PFC100/PFC200 and WAGO Compact Controller CC100**

| Article Number | Fixed Firmware |
|-----------------------|--------------------|
| 750-81xx/xxx-xxx | 03.10.10(22) |
| 750-8217/xxx-xxx | 03.10.10(22) |
| 750-82xx/xxx-xxx | 03.10.10(22) |
| 751-9301 | 04.01.10(23) |

### **Serie WAGO Touch Panel 600 and WAGO Edge Controller**

| Article Number | Fixed Firmware |
|-----------------------|--------------------|
| 762-4xxx | 03.10.10(22) |
| 762-5xxx | 03.10.10(22) |
| 762-6xxx | 03.10.10(22) |
| 752-8303/8000-002 | 03.10.10(22) |

Vulnerabilities 1

Revision history

  1. #1.0.0

    Initial revision.

References