Description
On WAGO PFC200 devices in different firmware versions with special crafted packets an attacker with network access to the device could cause a denial of service for the login service of the runtime.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| WAGO | Series PFC200 Controller | 750-823 – ≤ FW07, 750-829 – ≤ FW14, 750-831/000-00x – ≤ FW14, 750-832/000-00x – ≤ FW06, 750-852 – ≤ FW14, 750-862 – ≤ FW07, 750-880/0xx-xxx – ≤ FW15, 750-881 – ≤ FW14, 750-882 – ≤ FW14, 750-885/0xx-xxx – ≤ FW14, 750-889 – ≤ FW14, 750-890/0xx-xxx – ≤ FW07, 750-891 – ≤ FW07, 750-893 – ≤ FW07 | — |
| WAGO | Series Ethernet Controller | 750-8202/xxx-xxx – < 03.06.19 (18), 750-8203/xxx-xxx – < 03.06.19 (18), 750-8204/xxx-xxx – < 03.06.19 (18), 750-8206/xxx-xxx – < 03.06.19 (18), 750-8207/xxx-xxx – < 03.06.19 (18), 750-8208/xxx-xxx – < 03.06.19 (18), 750-8210/xxx-xxx – < 03.06.19 (18), 750-8211/xxx-xxx – < 03.06.19 (18), 750-8212/xx… | 03.06.19 (18) |
Advisories 1
- VDE-2021-014 WAGO: Multiple Vulnerabilities in CODESYS Runtime 2.3 CERT@VDE · May 22, 2025