Description
An unautheticated remote attacker could send specifically crafted packets to a affected device. If an authenticated user then views that data in a specific page of the web-based management a buffer overflow will be triggered to gain full access of the device.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| WAGO | Controller BACnet/IP | ≤ FW13 | — |
| WAGO | Controller BACnet MS/TP | ≤ FW13 | — |
| WAGO | Ethernet Controller 3rd Generation | ≤ FW13 | — |
| WAGO | Fieldbus Coupler Ethernet 3rd Generation | ≤ FW13 | — |
Advisories 1
- VDE-2023-039 Wago: Multiple vulnerabilities in web-based management of multiple products CERT@VDE · Mar 13, 2024