Vulnerability Description
Missing Release of Resource after Effective Lifetime vulnerability in OpenSSL implementation of WAGO 750-831/xxx-xxx, 750-880/xxx-xxx, 750-881, 750-889 in versions FW4 up to FW15 allows an unauthenticated attacker to cause DoS on the device.
CVSS Score
HIGH
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Wago | 750-880\/040-000 Firmware | >= fw4, <= fw15 |
| Wago | 750-880\/040-000 | - |
| Wago | 750-880\/025-002 Firmware | >= fw4, <= fw15 |
| Wago | 750-880\/025-002 | - |
| Wago | 750-880\/025-001 Firmware | >= fw4, <= fw15 |
| Wago | 750-880\/025-001 | - |
| Wago | 750-880\/025-000 Firmware | >= fw4, <= fw15 |
| Wago | 750-880\/025-000 | - |
| Wago | 750-831\/000-002 Firmware | >= fw4, <= fw15 |
| Wago | 750-831\/000-002 | - |
| Wago | 750-889 Firmware | >= fw4, <= fw15 |
| Wago | 750-889 | - |
| Wago | 750-881 Firmware | >= fw4, <= fw15 |
| Wago | 750-881 | - |
| Wago | 750-831 Firmware | >= fw4, <= fw15 |
| Wago | 750-831 | - |
| Wago | 750-880 Firmware | >= fw4, <= fw15 |
| Wago | 750-880 | - |
Related Weaknesses (CWE)
References
- https://cert.vde.com/en-us/advisories/vde-2021-038Third Party Advisory
- https://cert.vde.com/en-us/advisories/vde-2021-038Third Party Advisory
FAQ
What is CVE-2021-34581?
CVE-2021-34581 is a vulnerability with a CVSS score of 7.5 (HIGH). Missing Release of Resource after Effective Lifetime vulnerability in OpenSSL implementation of WAGO 750-831/xxx-xxx, 750-880/xxx-xxx, 750-881, 750-889 in versions FW4 up to FW15 allows an unauthentic...
How severe is CVE-2021-34581?
CVE-2021-34581 has been rated HIGH with a CVSS base score of 7.5/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2021-34581?
Check the references section above for vendor advisories and patch information. Affected products include: Wago 750-880\/040-000 Firmware, Wago 750-880\/040-000, Wago 750-880\/025-002 Firmware, Wago 750-880\/025-002, Wago 750-880\/025-001 Firmware.