CVE-2020-12516: WAGO 750-331/xxx-xxx, отказ на услуга

Описание

Оригинално описание

Older firmware versions (FW1 up to FW10) of the WAGO PLC family 750-88x and 750-352 are vulnerable for a special denial of service attack.

Засегнати продукти

• WAGO 750-331/xxx-xxx: FW1<=FW10
• WAGO 750-352: FW1<=FW10
• WAGO 750-829: FW1<=FW10
• WAGO 750-831/xxx-xxx: FW1<=FW10
• WAGO 750-852: FW1<=FW10
• WAGO 750-880/xxx-xxx: FW1<=FW10
• WAGO 750-881: FW1<=FW10
• WAGO 750-882: FW1<=FW10
• WAGO 750-885: FW1<=FW10
• WAGO 750-889: FW1<=FW10

Вид слабост

• CWE-400 Неконтролирано потребление на ресурси

История

Други уязвимости в WAGO 750-331/xxx-xxx

• 4.9CVE-2023-1620
• 4.9CVE-2023-1619
• 8.2CVE-2020-12505

Първоизточници

• https://www.cve.org/CVERecord?id=CVE-2020-12516
• https://nvd.nist.gov/vuln/detail/CVE-2020-12516
• https://us-cert.cisa.gov/ics/advisories/icsa-20-308-01
• https://cert.vde.com/en-us/advisories/vde-2020-042