Vulnerability Description
CODESYS V2 Web-Server before 1.1.9.20 has Improper Access Control.
CVSS Score
9.8
CRITICAL
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Wago | 750-893 Firmware | < fw08 |
| Wago | 750-893 | - |
| Wago | 750-891 Firmware | < fw08 |
| Wago | 750-891 | - |
| Wago | 750-890 Firmware | < fw08 |
| Wago | 750-890 | - |
| Wago | 750-889 Firmware | < fw15 |
| Wago | 750-889 | - |
| Wago | 750-885 Firmware | < fw15 |
| Wago | 750-885 | - |
| Wago | 750-882 Firmware | < fw15 |
| Wago | 750-882 | - |
| Wago | 750-881 Firmware | < fw15 |
| Wago | 750-881 | - |
| Wago | 750-880 Firmware | < fw16 |
| Wago | 750-880 | - |
| Wago | 750-862 Firmware | < fw08 |
| Wago | 750-862 | - |
| Wago | 750-852 Firmware | < fw15 |
| Wago | 750-852 | - |
Related Weaknesses (CWE)
References
- https://customers.codesys.com/index.phpPermissions RequiredVendor Advisory
- https://customers.codesys.com/index.php?eID=dumpFile&t=f&f=14726&token=553da5d11Vendor Advisory
- https://customers.codesys.com/index.phpPermissions RequiredVendor Advisory
- https://customers.codesys.com/index.php?eID=dumpFile&t=f&f=14726&token=553da5d11Vendor Advisory
FAQ
What is CVE-2021-30190?
CVE-2021-30190 is a vulnerability with a CVSS score of 9.8 (CRITICAL). CODESYS V2 Web-Server before 1.1.9.20 has Improper Access Control.
How severe is CVE-2021-30190?
CVE-2021-30190 has been rated CRITICAL with a CVSS base score of 9.8/10. This is considered a critical vulnerability requiring immediate attention.
Is there a patch for CVE-2021-30190?
Check the references section above for vendor advisories and patch information. Affected products include: Wago 750-893 Firmware, Wago 750-893, Wago 750-891 Firmware, Wago 750-891, Wago 750-890 Firmware.