High · 7.5 CVE-2021-34581 EUVD-2021-21231GHSA-v448-m2g5-fm7c

WAGO: Denial of Service vulnerability inside the OpenSSL implementation

Published Aug 31, 2021 · Updated Sep 17, 2024 · Assigned by CERTVDE

Vendor: WAGO Product: 750-831/xxx-xxx, 750-880/xxx-xxx, 750-881, 750-889 Category: ICS / OT

Description

Missing Release of Resource after Effective Lifetime vulnerability in OpenSSL implementation of WAGO 750-831/xxx-xxx, 750-880/xxx-xxx, 750-881, 750-889 in versions FW4 up to FW15 allows an unauthenticated attacker to cause DoS on the device.

Affected products

Vendor	Product	Affected	Fixed
WAGO	750-831/xxx-xxx, 750-880/xxx-xxx, 750-881, 750-889	FW4 – < All*	All*

Advisories 1

VDE-2021-038 WAGO: OpenSSL DoS Vulnerability in PLCs CERT@VDE · May 14, 2025

References

https://cert.vde.com/en-us/advisories/vde-2021-038