CVEvulnerability

CVE-2018-8836

5.3 MEDIUM Published 2018-04-03 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2018-04-03
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.0 ([email protected])
5.3 MEDIUM — CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
CVSS 2.0 ([email protected])
5.0 MEDIUM — AV:N/AC:L/Au:N/C:N/I:N/A:P
Weaknesses
CWE-404

Description

Wago 750 Series PLCs with firmware version 10 and prior include a remote attack may take advantage of an improper implementation of the 3 way handshake during a TCP connection affecting the communications with commission and service tools. Specially crafted packets may also be sent to Port 2455/TCP/IP, used in Codesys management software, which may result in a denial-of-service condition of communications with commissioning and service tools.

Affected configurations

• wago 750-880 firmware (<= 10) • wago 750-881 firmware (<= 10) • wago 750-852 firmware (<= 10) • wago 750-882 firmware (<= 10) • wago 750-885 firmware (<= 10) • wago 750-831 firmware (<= 10) • wago 750-889 firmware (<= 10) • wago 750-829 firmware (<= 10)

Related

Weakness · CWE (1)

  • CWE-404 Improper Resource Shutdown or Release weakness

References