VulnerabilityModified
CVE-2023-1150
Uncontrolled resource consumption in Series WAGO 750-3x/-8x products may allow an unauthenticated remote attacker to DoS the MODBUS server with specially crafted packets.
HIGH 7.5EPSS 0.93%
Does this matter?
High impact if exploited, but EPSS currently rates exploitation as unlikely (0.93%). Schedule it in the normal patch cycle and watch for a rise in EPSS or a public exploit.
Description
Uncontrolled resource consumption in Series WAGO 750-3x/-8x products may allow an unauthenticated remote attacker to DoS the MODBUS server with specially crafted packets.
- CVSS 3.1
- 7.5 HIGHCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
- EPSS
- 0.93% probability · 59th percentile
- CISA KEV
- Not listed
- Weakness
- CWE-772
- Affected
- wago/750-363\/040-000 firmware · wago/750-362\/040-000 firmware · wago/750-362\/000-001 firmware · wago/750-891 firmware · wago/750-365\/040-010 firmware · wago/750-364\/040-010 firmware · wago/750-362 firmware · wago/750-363 firmware · wago/750-823 firmware · wago/750-832 firmware · wago/750-832\/000-002 firmware · wago/750-862 firmware · wago/750-890 firmware · wago/750-890\/025-000 firmware · wago/750-890\/025-001 firmware · wago/750-890\/025-002 firmware · wago/750-890\/040-000 firmware · wago/750-893 firmware
- Source
- info@cert.vde.com
References
- https://cert.vde.com/en/advisories/VDE-2023-005/Third Party Advisory
- https://cert.vde.com/en/advisories/VDE-2023-005/Third Party Advisory
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.