CVEvulnerability

CVE-2021-21001

6.5 MEDIUM Published 2021-05-24 Modified 2026-06-17 Official page ↗
Status
Analyzed
Published
2021-05-24
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.1 ([email protected])
9.1 CRITICAL — CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H
CVSS 3.1 ([email protected])
6.5 MEDIUM — CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
CVSS 2.0 ([email protected])
4.0 MEDIUM — AV:N/AC:L/Au:S/C:P/I:N/A:N
Weaknesses
CWE-22

Description

On WAGO PFC200 devices in different firmware versions with special crafted packets an authorised attacker with network access to the device can access the file system with higher privileges.

Affected configurations

• wago 750-823 firmware (< fw08) • wago 750-829 firmware (< fw15) • wago 750-831 firmware (< fw15) • wago 750-832 firmware (< fw08) • wago 750-852 firmware (< fw15) • wago 750-862 firmware (< fw08) • wago 750-880 firmware (< fw16) • wago 750-881 firmware (< fw15) • wago 750-882 firmware (< fw15) • wago 750-885 firmware (< fw15) • wago 750-889 firmware (< fw15) • wago 750-890 firmware (< fw08) • wago 750-891 firmware (< fw08) • wago 750-893 firmware (< fw08) • wago 750-8202 firmware (< 03.06.19 \(18\)) • wago 750-8203 firmware (< 03.06.19 \(18\)) • wago 750-8204 firmware (< 03.06.19 \(18\)) • wago 750-8206 firmware (< 03.06.19 \(18\)) • wago 750-8207 firmware (< 03.06.19 \(18\)) • wago 750-8208 firmware (< 03.06.19 \(18\)) • wago 750-8210 firmware (< 03.06.19 \(18\)) • wago 750-8211 firmware (< 03.06.19 \(18\)) • wago 750-8212 firmware (< 03.06.19 \(18\)) • wago 750-8213 firmware (< 03.06.19 \(18\)) • wago 750-8214 firmware (< 03.06.19 \(18\)) • wago 750-8216 firmware (< 03.06.19 \(18\)) • wago 750-8217 firmware (< 03.06.19 \(18\))

Related

Weakness · CWE (1)

  • CWE-22 Improper Limitation of a Pathname to a Restricted Directory weakness

References