Vulnerability Description
Crafted web server requests can be utilised to read partial stack or heap memory or may trigger a denial-of- service condition due to a crash in the CODESYS V2 web server prior to V1.1.9.22.
CVSS Score
CRITICAL
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Wago | 750-823 Firmware | < fw10 |
| Wago | 750-823 | - |
| Wago | 750-829 Firmware | < fw17 |
| Wago | 750-829 | - |
| Wago | 750-831 Firmware | < fw17 |
| Wago | 750-831 | - |
| Wago | 750-832 Firmware | < fw10 |
| Wago | 750-832 | - |
| Wago | 750-852 Firmware | < fw17 |
| Wago | 750-852 | - |
| Wago | 750-862 Firmware | < fw10 |
| Wago | 750-862 | - |
| Wago | 750-880 Firmware | < fw17 |
| Wago | 750-880 | - |
| Wago | 750-881 Firmware | < fw17 |
| Wago | 750-881 | - |
| Wago | 750-882 Firmware | < fw17 |
| Wago | 750-882 | - |
| Wago | 750-885 Firmware | < fw17 |
| Wago | 750-885 | - |
Related Weaknesses (CWE)
References
- https://customers.codesys.com/index.php?eID=dumpFile&t=f&f=16876&token=a3f1d937fVendor Advisory
- https://www.tenable.com/security/research/tra-2021-47ExploitThird Party Advisory
- https://customers.codesys.com/index.php?eID=dumpFile&t=f&f=16876&token=a3f1d937fVendor Advisory
- https://www.tenable.com/security/research/tra-2021-47ExploitThird Party Advisory
FAQ
What is CVE-2021-34584?
CVE-2021-34584 is a vulnerability with a CVSS score of 9.1 (CRITICAL). Crafted web server requests can be utilised to read partial stack or heap memory or may trigger a denial-of- service condition due to a crash in the CODESYS V2 web server prior to V1.1.9.22.
How severe is CVE-2021-34584?
CVE-2021-34584 has been rated CRITICAL with a CVSS base score of 9.1/10. This is considered a critical vulnerability requiring immediate attention.
Is there a patch for CVE-2021-34584?
Check the references section above for vendor advisories and patch information. Affected products include: Wago 750-823 Firmware, Wago 750-823, Wago 750-829 Firmware, Wago 750-829, Wago 750-831 Firmware.