Vulnerability-Lookup

BDU:2021-03133 (CVE-2021-21001)

Vulnerability from fstec – Published: 2021-06-23 – Updated: 2021-06-23 – View on bdu.fstec.ru Fixed

Title

Уязвимость микропрограммного обеспечения программируемых логических контроллеров WAGO Series PFC200, связанная с неверным ограничением имени пути к каталогу с ограниченным доступом, позволяющая нарушителю получить несанкционированный доступ к защищаемой информации

Summary

Уязвимость микропрограммного обеспечения программируемых логических контроллеров WAGO Series PFC200 связана с неверным ограничением имени пути к каталогу с ограниченным доступом. Эксплуатация уязвимости может позволить нарушителю, действующему удаленно, получить несанкционированный доступ к защищаемой информации

Severity

6.8 (Medium) CVSS 2.0


                      
                        AV:N/AC:L/Au:S/C:C/I:N/A:N

6.5 (Medium) CVSS 3.0


                      
                        CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Class

Code vulnerability

Status

Confirmed by the vendor

Exploitation

Resource manipulation

Incidents

Being clarified

Remediation

Software update

CWE

CWE-22 - Неверное ограничение имени пути к каталогу с ограниченным доступом («Обход пути»)

Aliases

CVE-2021-21001

References

2 references

URL
https://nvd.nist.gov/vuln/detail/CVE-2021-21001
https://cert.vde.com/en-us/advisories/vde-2021-014

Impacted products

27 products from 1 vendor

Vendors

WAGO Kontakttechnik GmbH & Co. KG

Products

WAGO 750-823, WAGO 750-829, WAGO 750-831, WAGO 750-832, WAGO 750-852, WAGO 750-862, WAGO 750-880, WAGO 750-881, WAGO 750-882, WAGO 750-885, WAGO 750-889, WAGO 750-890, WAGO 750-891, WAGO 750-893, WAGO 750-8202, WAGO 750-8203, WAGO 750-8204, WAGO 750-8206, WAGO 750-8207, WAGO 750-8208, WAGO 750-8210, WAGO 750-8211, WAGO 750-8212, WAGO 750-8213, WAGO 750-8214, WAGO 750-8216, WAGO 750-8217

Versions

до FW07 включительно (WAGO 750-823), до FW14 включительно (WAGO 750-829), до FW14 включительно (WAGO 750-831), до FW06 включительно (WAGO 750-832), до FW14 включительно (WAGO 750-852), до FW07 включительно (WAGO 750-862), до FW15 включительно (WAGO 750-880), до FW14 включительно (WAGO 750-881), до FW14 включительно (WAGO 750-882), до FW14 включительно (WAGO 750-885), до FW14 включительно (WAGO 750-889), до FW07 включительно (WAGO 750-890), до FW07 включительно (WAGO 750-891), до FW07 включительно (WAGO 750-893), до 18 (WAGO 750-8202), до 18 (WAGO 750-8203), до 18 (WAGO 750-8204), до 18 (WAGO 750-8206), до 18 (WAGO 750-8207), до 18 (WAGO 750-8208), до 18 (WAGO 750-8210), до 18 (WAGO 750-8211), до 18 (WAGO 750-8212), до 18 (WAGO 750-8213), до 18 (WAGO 750-8214), до 18 (WAGO 750-8216), до 18 (WAGO 750-8217)

Product types

Appliance software, Network appliance software, Network device, Firmware

Mitigations

Использование рекомендаций: https://cert.vde.com/en-us/advisories/vde-2021-014

JSON

To clipboard

{
  "CVSS 2.0": "AV:N/AC:L/Au:S/C:C/I:N/A:N",
  "CVSS 3.0": "AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
  "CVSS 4.0": null,
  "remediation_\u0418\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440": null,
  "remediation_\u041d\u0430\u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u0435": null,
  "\u0412\u0435\u043d\u0434\u043e\u0440 \u041f\u041e": "WAGO Kontakttechnik GmbH \u0026 Co. KG",
  "\u0412\u0435\u0440\u0441\u0438\u044f \u041f\u041e": "\u0434\u043e FW07 \u0432\u043a\u043b\u044e\u0447\u0438\u0442\u0435\u043b\u044c\u043d\u043e (WAGO 750-823), \u0434\u043e FW14 \u0432\u043a\u043b\u044e\u0447\u0438\u0442\u0435\u043b\u044c\u043d\u043e (WAGO 750-829), \u0434\u043e FW14 \u0432\u043a\u043b\u044e\u0447\u0438\u0442\u0435\u043b\u044c\u043d\u043e (WAGO 750-831), \u0434\u043e FW06 \u0432\u043a\u043b\u044e\u0447\u0438\u0442\u0435\u043b\u044c\u043d\u043e (WAGO 750-832), \u0434\u043e FW14 \u0432\u043a\u043b\u044e\u0447\u0438\u0442\u0435\u043b\u044c\u043d\u043e (WAGO 750-852), \u0434\u043e FW07 \u0432\u043a\u043b\u044e\u0447\u0438\u0442\u0435\u043b\u044c\u043d\u043e (WAGO 750-862), \u0434\u043e FW15 \u0432\u043a\u043b\u044e\u0447\u0438\u0442\u0435\u043b\u044c\u043d\u043e (WAGO 750-880), \u0434\u043e FW14 \u0432\u043a\u043b\u044e\u0447\u0438\u0442\u0435\u043b\u044c\u043d\u043e (WAGO 750-881), \u0434\u043e FW14 \u0432\u043a\u043b\u044e\u0447\u0438\u0442\u0435\u043b\u044c\u043d\u043e (WAGO 750-882), \u0434\u043e FW14 \u0432\u043a\u043b\u044e\u0447\u0438\u0442\u0435\u043b\u044c\u043d\u043e (WAGO 750-885), \u0434\u043e FW14 \u0432\u043a\u043b\u044e\u0447\u0438\u0442\u0435\u043b\u044c\u043d\u043e (WAGO 750-889), \u0434\u043e FW07 \u0432\u043a\u043b\u044e\u0447\u0438\u0442\u0435\u043b\u044c\u043d\u043e (WAGO 750-890), \u0434\u043e FW07 \u0432\u043a\u043b\u044e\u0447\u0438\u0442\u0435\u043b\u044c\u043d\u043e (WAGO 750-891), \u0434\u043e FW07 \u0432\u043a\u043b\u044e\u0447\u0438\u0442\u0435\u043b\u044c\u043d\u043e (WAGO 750-893), \u0434\u043e 18 (WAGO 750-8202), \u0434\u043e 18 (WAGO 750-8203), \u0434\u043e 18 (WAGO 750-8204), \u0434\u043e 18 (WAGO 750-8206), \u0434\u043e 18 (WAGO 750-8207), \u0434\u043e 18 (WAGO 750-8208), \u0434\u043e 18 (WAGO 750-8210), \u0434\u043e 18 (WAGO 750-8211), \u0434\u043e 18 (WAGO 750-8212), \u0434\u043e 18 (WAGO 750-8213), \u0434\u043e 18 (WAGO 750-8214), \u0434\u043e 18 (WAGO 750-8216), \u0434\u043e 18 (WAGO 750-8217)",
  "\u0412\u043e\u0437\u043c\u043e\u0436\u043d\u044b\u0435 \u043c\u0435\u0440\u044b \u043f\u043e \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044e": "\u0418\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435 \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0430\u0446\u0438\u0439:\nhttps://cert.vde.com/en-us/advisories/vde-2021-014",
  "\u0414\u0430\u0442\u0430 \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u0438\u044f": "24.05.2021",
  "\u0414\u0430\u0442\u0430 \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0435\u0433\u043e \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f": "23.06.2021",
  "\u0414\u0430\u0442\u0430 \u043f\u0443\u0431\u043b\u0438\u043a\u0430\u0446\u0438\u0438": "23.06.2021",
  "\u0418\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440": "BDU:2021-03133",
  "\u0418\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440\u044b \u0434\u0440\u0443\u0433\u0438\u0445 \u0441\u0438\u0441\u0442\u0435\u043c \u043e\u043f\u0438\u0441\u0430\u043d\u0438\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "CVE-2021-21001",
  "\u0418\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044f \u043e\u0431 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u0438": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0430",
  "\u041a\u043b\u0430\u0441\u0441 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043a\u043e\u0434\u0430",
  "\u041d\u0430\u0437\u0432\u0430\u043d\u0438\u0435 \u041f\u041e": "WAGO 750-823, WAGO 750-829, WAGO 750-831, WAGO 750-832, WAGO 750-852, WAGO 750-862, WAGO 750-880, WAGO 750-881, WAGO 750-882, WAGO 750-885, WAGO 750-889, WAGO 750-890, WAGO 750-891, WAGO 750-893, WAGO 750-8202, WAGO 750-8203, WAGO 750-8204, WAGO 750-8206, WAGO 750-8207, WAGO 750-8208, WAGO 750-8210, WAGO 750-8211, WAGO 750-8212, WAGO 750-8213, WAGO 750-8214, WAGO 750-8216, WAGO 750-8217",
  "\u041d\u0430\u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u0435 \u041e\u0421 \u0438 \u0442\u0438\u043f \u0430\u043f\u043f\u0430\u0440\u0430\u0442\u043d\u043e\u0439 \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u044b": null,
  "\u041d\u0430\u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043c\u0438\u043a\u0440\u043e\u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0433\u043e \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u0438\u0440\u0443\u0435\u043c\u044b\u0445 \u043b\u043e\u0433\u0438\u0447\u0435\u0441\u043a\u0438\u0445 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u043b\u0435\u0440\u043e\u0432 WAGO Series PFC200, \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u0430\u044f \u0441 \u043d\u0435\u0432\u0435\u0440\u043d\u044b\u043c \u043e\u0433\u0440\u0430\u043d\u0438\u0447\u0435\u043d\u0438\u0435\u043c \u0438\u043c\u0435\u043d\u0438 \u043f\u0443\u0442\u0438 \u043a \u043a\u0430\u0442\u0430\u043b\u043e\u0433\u0443 \u0441 \u043e\u0433\u0440\u0430\u043d\u0438\u0447\u0435\u043d\u043d\u044b\u043c \u0434\u043e\u0441\u0442\u0443\u043f\u043e\u043c, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0430\u044f \u043d\u0430\u0440\u0443\u0448\u0438\u0442\u0435\u043b\u044e \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u043d\u0435\u0441\u0430\u043d\u043a\u0446\u0438\u043e\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0439 \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0437\u0430\u0449\u0438\u0449\u0430\u0435\u043c\u043e\u0439 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438",
  "\u041d\u0430\u043b\u0438\u0447\u0438\u0435 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u0430": "\u0414\u0430\u043d\u043d\u044b\u0435 \u0443\u0442\u043e\u0447\u043d\u044f\u044e\u0442\u0441\u044f",
  "\u041e\u043f\u0438\u0441\u0430\u043d\u0438\u0435 \u043e\u0448\u0438\u0431\u043a\u0438 CWE": "\u041d\u0435\u0432\u0435\u0440\u043d\u043e\u0435 \u043e\u0433\u0440\u0430\u043d\u0438\u0447\u0435\u043d\u0438\u0435 \u0438\u043c\u0435\u043d\u0438 \u043f\u0443\u0442\u0438 \u043a \u043a\u0430\u0442\u0430\u043b\u043e\u0433\u0443 \u0441 \u043e\u0433\u0440\u0430\u043d\u0438\u0447\u0435\u043d\u043d\u044b\u043c \u0434\u043e\u0441\u0442\u0443\u043f\u043e\u043c (\u00ab\u041e\u0431\u0445\u043e\u0434 \u043f\u0443\u0442\u0438\u00bb) (CWE-22)",
  "\u041e\u043f\u0438\u0441\u0430\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043c\u0438\u043a\u0440\u043e\u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0433\u043e \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u0438\u0440\u0443\u0435\u043c\u044b\u0445 \u043b\u043e\u0433\u0438\u0447\u0435\u0441\u043a\u0438\u0445 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u043b\u0435\u0440\u043e\u0432 WAGO Series PFC200 \u0441\u0432\u044f\u0437\u0430\u043d\u0430 \u0441 \u043d\u0435\u0432\u0435\u0440\u043d\u044b\u043c \u043e\u0433\u0440\u0430\u043d\u0438\u0447\u0435\u043d\u0438\u0435\u043c \u0438\u043c\u0435\u043d\u0438 \u043f\u0443\u0442\u0438 \u043a \u043a\u0430\u0442\u0430\u043b\u043e\u0433\u0443 \u0441 \u043e\u0433\u0440\u0430\u043d\u0438\u0447\u0435\u043d\u043d\u044b\u043c \u0434\u043e\u0441\u0442\u0443\u043f\u043e\u043c. \u042d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043c\u043e\u0436\u0435\u0442 \u043f\u043e\u0437\u0432\u043e\u043b\u0438\u0442\u044c \u043d\u0430\u0440\u0443\u0448\u0438\u0442\u0435\u043b\u044e, \u0434\u0435\u0439\u0441\u0442\u0432\u0443\u044e\u0449\u0435\u043c\u0443 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e, \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u043d\u0435\u0441\u0430\u043d\u043a\u0446\u0438\u043e\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0439 \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0437\u0430\u0449\u0438\u0449\u0430\u0435\u043c\u043e\u0439 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438",
  "\u041f\u043e\u0441\u043b\u0435\u0434\u0441\u0442\u0432\u0438\u044f \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": null,
  "\u041f\u0440\u043e\u0447\u0430\u044f \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044f": null,
  "\u0421\u0432\u044f\u0437\u044c \u0441 \u0438\u043d\u0446\u0438\u0434\u0435\u043d\u0442\u0430\u043c\u0438 \u0418\u0411": "\u0414\u0430\u043d\u043d\u044b\u0435 \u0443\u0442\u043e\u0447\u043d\u044f\u044e\u0442\u0441\u044f",
  "\u0421\u043e\u0441\u0442\u043e\u044f\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u041e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d\u0430",
  "\u0421\u043f\u043e\u0441\u043e\u0431 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044f": "\u041e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0433\u043e \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f",
  "\u0421\u043f\u043e\u0441\u043e\u0431 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438": "\u041c\u0430\u043d\u0438\u043f\u0443\u043b\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u0435 \u0440\u0435\u0441\u0443\u0440\u0441\u0430\u043c\u0438",
  "\u0421\u0441\u044b\u043b\u043a\u0438 \u043d\u0430 \u0438\u0441\u0442\u043e\u0447\u043d\u0438\u043a\u0438": "https://nvd.nist.gov/vuln/detail/CVE-2021-21001\nhttps://cert.vde.com/en-us/advisories/vde-2021-014",
  "\u0421\u0442\u0430\u0442\u0443\u0441 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u041f\u043e\u0434\u0442\u0432\u0435\u0440\u0436\u0434\u0435\u043d\u0430 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0438\u0442\u0435\u043b\u0435\u043c",
  "\u0422\u0438\u043f \u041f\u041e": "\u041f\u041e \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e-\u0430\u043f\u043f\u0430\u0440\u0430\u0442\u043d\u043e\u0433\u043e \u0441\u0440\u0435\u0434\u0441\u0442\u0432\u0430, \u041f\u041e \u0441\u0435\u0442\u0435\u0432\u043e\u0433\u043e \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e-\u0430\u043f\u043f\u0430\u0440\u0430\u0442\u043d\u043e\u0433\u043e \u0441\u0440\u0435\u0434\u0441\u0442\u0432\u0430, \u0421\u0435\u0442\u0435\u0432\u043e\u0435 \u0441\u0440\u0435\u0434\u0441\u0442\u0432\u043e, \u041c\u0438\u043a\u0440\u043e\u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u044b\u0439 \u043a\u043e\u0434",
  "\u0422\u0438\u043f \u043e\u0448\u0438\u0431\u043a\u0438 CWE": "CWE-22",
  "\u0423\u0440\u043e\u0432\u0435\u043d\u044c \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u0421\u0440\u0435\u0434\u043d\u0438\u0439 \u0443\u0440\u043e\u0432\u0435\u043d\u044c \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 (\u0431\u0430\u0437\u043e\u0432\u0430\u044f \u043e\u0446\u0435\u043d\u043a\u0430 CVSS 2.0 \u0441\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 6,8)\n\u0421\u0440\u0435\u0434\u043d\u0438\u0439 \u0443\u0440\u043e\u0432\u0435\u043d\u044c \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 (\u0431\u0430\u0437\u043e\u0432\u0430\u044f \u043e\u0446\u0435\u043d\u043a\u0430 CVSS 3.0 \u0441\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 6,5)"
}

CVE-2021-21001 (GCVE-0-2021-21001)

Vulnerability from cvelistv5 – Published: 2021-05-24 11:05 – Updated: 2024-09-16 16:19

Title

WAGO: PFC200 Access to files outside the home directory

Summary

On WAGO PFC200 devices in different firmware versions with special crafted packets an authorised attacker with network access to the device can access the file system with higher privileges.

Severity

9.1 (Critical)


                        
                          CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H

CWE

CWE-22 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')

Assigner

CERTVDE icscert root

References

1 reference

URL	Tags
https://cert.vde.com/en-us/advisories/vde-2021-014	x_refsource_CONFIRM

Impacted products

2 products

Vendor	Product	Version
WAGO	Series PFC200 Controller	Affected: 750-823 , ≤ FW07 (custom) Affected: 750-829 , ≤ FW14 (custom) Affected: 750-831/000-00x , ≤ FW14 (custom) Affected: 750-832/000-00x , ≤ FW06 (custom) Affected: 750-852 , ≤ FW14 (custom) Affected: 750-862 , ≤ FW07 (custom) Affected: 750-880/0xx-xxx , ≤ FW15 (custom) Affected: 750-881 , ≤ FW14 (custom) Affected: 750-882 , ≤ FW14 (custom) Affected: 750-885/0xx-xxx , ≤ FW14 (custom) Affected: 750-889 , ≤ FW14 (custom) Affected: 750-890/0xx-xxx , ≤ FW07 (custom) Affected: 750-891 , ≤ FW07 (custom) Affected: 750-893 , ≤ FW07 (custom)
WAGO	Series Ethernet Controller	Affected: 750-8202/xxx-xxx , < 03.06.19 (18) (custom) Affected: 750-8203/xxx-xxx , < 03.06.19 (18) (custom) Affected: 750-8204/xxx-xxx , < 03.06.19 (18) (custom) Affected: 750-8206/xxx-xxx , < 03.06.19 (18) (custom) Affected: 750-8207/xxx-xxx , < 03.06.19 (18) (custom) Affected: 750-8208/xxx-xxx , < 03.06.19 (18) (custom) Affected: 750-8210/xxx-xxx , < 03.06.19 (18) (custom) Affected: 750-8211/xxx-xxx , < 03.06.19 (18) (custom) Affected: 750-8212/xxx-xxx , < 03.06.19 (18) (custom) Affected: 750-8213/xxx-xxx , < 03.06.19 (18) (custom) Affected: 750-8214/xxx-xxx , < 03.06.19 (18) (custom) Affected: 750-8216/xxx-xxx , < 03.06.19 (18) (custom) Affected: 750-8217/xxx-xxx , < 03.06.19 (18) (custom)

Date Public

2021-05-20 00:00

Credits

These vulnerabilities were reported by JSC Positive Technologies (Vyacheslav Moskvin, Anton Dorfman, Sergey Fedonin, Ivan Kurnakov, Denis Goryushev). Coordination done by CERT@VDE.

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-03T17:53:23.101Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://cert.vde.com/en-us/advisories/vde-2021-014"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "Series PFC200 Controller",
          "vendor": "WAGO",
          "versions": [
            {
              "lessThanOrEqual": "FW07",
              "status": "affected",
              "version": "750-823",
              "versionType": "custom"
            },
            {
              "lessThanOrEqual": "FW14",
              "status": "affected",
              "version": "750-829",
              "versionType": "custom"
            },
            {
              "lessThanOrEqual": "FW14",
              "status": "affected",
              "version": "750-831/000-00x",
              "versionType": "custom"
            },
            {
              "lessThanOrEqual": "FW06",
              "status": "affected",
              "version": "750-832/000-00x",
              "versionType": "custom"
            },
            {
              "lessThanOrEqual": "FW14",
              "status": "affected",
              "version": "750-852",
              "versionType": "custom"
            },
            {
              "lessThanOrEqual": "FW07",
              "status": "affected",
              "version": "750-862",
              "versionType": "custom"
            },
            {
              "lessThanOrEqual": "FW15",
              "status": "affected",
              "version": "750-880/0xx-xxx",
              "versionType": "custom"
            },
            {
              "lessThanOrEqual": "FW14",
              "status": "affected",
              "version": "750-881",
              "versionType": "custom"
            },
            {
              "lessThanOrEqual": "FW14",
              "status": "affected",
              "version": "750-882",
              "versionType": "custom"
            },
            {
              "lessThanOrEqual": "FW14",
              "status": "affected",
              "version": "750-885/0xx-xxx",
              "versionType": "custom"
            },
            {
              "lessThanOrEqual": "FW14",
              "status": "affected",
              "version": "750-889",
              "versionType": "custom"
            },
            {
              "lessThanOrEqual": "FW07",
              "status": "affected",
              "version": "750-890/0xx-xxx",
              "versionType": "custom"
            },
            {
              "lessThanOrEqual": "FW07",
              "status": "affected",
              "version": "750-891",
              "versionType": "custom"
            },
            {
              "lessThanOrEqual": "FW07",
              "status": "affected",
              "version": "750-893",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "Series Ethernet Controller",
          "vendor": "WAGO",
          "versions": [
            {
              "lessThan": "03.06.19 (18)",
              "status": "affected",
              "version": "750-8202/xxx-xxx",
              "versionType": "custom"
            },
            {
              "lessThan": "03.06.19 (18)",
              "status": "affected",
              "version": "750-8203/xxx-xxx",
              "versionType": "custom"
            },
            {
              "lessThan": "03.06.19 (18)",
              "status": "affected",
              "version": "750-8204/xxx-xxx",
              "versionType": "custom"
            },
            {
              "lessThan": "03.06.19 (18)",
              "status": "affected",
              "version": "750-8206/xxx-xxx",
              "versionType": "custom"
            },
            {
              "lessThan": "03.06.19 (18)",
              "status": "affected",
              "version": "750-8207/xxx-xxx",
              "versionType": "custom"
            },
            {
              "lessThan": "03.06.19 (18)",
              "status": "affected",
              "version": "750-8208/xxx-xxx",
              "versionType": "custom"
            },
            {
              "lessThan": "03.06.19 (18)",
              "status": "affected",
              "version": "750-8210/xxx-xxx",
              "versionType": "custom"
            },
            {
              "lessThan": "03.06.19 (18)",
              "status": "affected",
              "version": "750-8211/xxx-xxx",
              "versionType": "custom"
            },
            {
              "lessThan": "03.06.19 (18)",
              "status": "affected",
              "version": "750-8212/xxx-xxx",
              "versionType": "custom"
            },
            {
              "lessThan": "03.06.19 (18)",
              "status": "affected",
              "version": "750-8213/xxx-xxx",
              "versionType": "custom"
            },
            {
              "lessThan": "03.06.19 (18)",
              "status": "affected",
              "version": "750-8214/xxx-xxx",
              "versionType": "custom"
            },
            {
              "lessThan": "03.06.19 (18)",
              "status": "affected",
              "version": "750-8216/xxx-xxx",
              "versionType": "custom"
            },
            {
              "lessThan": "03.06.19 (18)",
              "status": "affected",
              "version": "750-8217/xxx-xxx",
              "versionType": "custom"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "value": "These vulnerabilities were reported by JSC Positive Technologies (Vyacheslav Moskvin, Anton Dorfman, Sergey Fedonin, Ivan Kurnakov, Denis Goryushev). Coordination done by CERT@VDE."
        }
      ],
      "datePublic": "2021-05-20T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "On WAGO PFC200 devices in different firmware versions with special crafted packets an authorised attacker with network access to the device can access the file system with higher privileges."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 9.1,
            "baseSeverity": "CRITICAL",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "HIGH",
            "scope": "CHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H",
            "version": "3.1"
          }
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-22",
              "description": "CWE-22 Improper Limitation of a Pathname to a Restricted Directory (\u0027Path Traversal\u0027)",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2021-05-24T11:05:06.000Z",
        "orgId": "270ccfa6-a436-4e77-922e-914ec3a9685c",
        "shortName": "CERTVDE"
      },
      "references": [
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://cert.vde.com/en-us/advisories/vde-2021-014"
        }
      ],
      "solutions": [
        {
          "lang": "en",
          "value": "WAGO recommends all effected users with CODESYS 2.3 Runtime PLCs to update to the firmware versions listed at https://cert.vde.com/en-us/advisories/vde-2021-014 in the solution paragraph."
        }
      ],
      "source": {
        "advisory": "VDE-2021-014",
        "defect": [
          "VDE-2021-014"
        ],
        "discovery": "EXTERNAL"
      },
      "title": "WAGO: PFC200 Access to files outside the home directory",
      "workarounds": [
        {
          "lang": "en",
          "value": "Use general security best practices to protect systems from local and network attacks.\nDo not allow direct access to the device from untrusted networks.\nUpdate to the latest firmware according to the table in chapter solutions."
        }
      ],
      "x_generator": {
        "engine": "Vulnogram 0.0.9"
      },
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "info@cert.vde.com",
          "DATE_PUBLIC": "2021-05-20T10:00:00.000Z",
          "ID": "CVE-2021-21001",
          "STATE": "PUBLIC",
          "TITLE": "WAGO: PFC200 Access to files outside the home directory"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "Series PFC200 Controller",
                      "version": {
                        "version_data": [
                          {
                            "version_affected": "\u003c=",
                            "version_name": "750-823",
                            "version_value": "FW07"
                          },
                          {
                            "version_affected": "\u003c=",
                            "version_name": "750-829",
                            "version_value": "FW14"
                          },
                          {
                            "version_affected": "\u003c=",
                            "version_name": "750-831/000-00x",
                            "version_value": "FW14"
                          },
                          {
                            "version_affected": "\u003c=",
                            "version_name": "750-832/000-00x",
                            "version_value": "FW06"
                          },
                          {
                            "version_affected": "\u003c=",
                            "version_name": "750-852",
                            "version_value": "FW14"
                          },
                          {
                            "version_affected": "\u003c=",
                            "version_name": "750-862",
                            "version_value": "FW07"
                          },
                          {
                            "version_affected": "\u003c=",
                            "version_name": "750-880/0xx-xxx",
                            "version_value": "FW15"
                          },
                          {
                            "version_affected": "\u003c=",
                            "version_name": "750-881",
                            "version_value": "FW14"
                          },
                          {
                            "version_affected": "\u003c=",
                            "version_name": "750-882",
                            "version_value": "FW14"
                          },
                          {
                            "version_affected": "\u003c=",
                            "version_name": "750-885/0xx-xxx",
                            "version_value": "FW14"
                          },
                          {
                            "version_affected": "\u003c=",
                            "version_name": "750-889",
                            "version_value": "FW14"
                          },
                          {
                            "version_affected": "\u003c=",
                            "version_name": "750-890/0xx-xxx",
                            "version_value": "FW07"
                          },
                          {
                            "version_affected": "\u003c=",
                            "version_name": "750-891",
                            "version_value": "FW07"
                          },
                          {
                            "version_affected": "\u003c=",
                            "version_name": "750-893",
                            "version_value": "FW07"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "Series Ethernet Controller",
                      "version": {
                        "version_data": [
                          {
                            "version_affected": "\u003c",
                            "version_name": "750-8202/xxx-xxx",
                            "version_value": "03.06.19 (18)"
                          },
                          {
                            "version_affected": "\u003c",
                            "version_name": "750-8203/xxx-xxx",
                            "version_value": "03.06.19 (18)"
                          },
                          {
                            "version_affected": "\u003c",
                            "version_name": "750-8204/xxx-xxx",
                            "version_value": "03.06.19 (18)"
                          },
                          {
                            "version_affected": "\u003c",
                            "version_name": "750-8206/xxx-xxx",
                            "version_value": "03.06.19 (18)"
                          },
                          {
                            "version_affected": "\u003c",
                            "version_name": "750-8207/xxx-xxx",
                            "version_value": "03.06.19 (18)"
                          },
                          {
                            "version_affected": "\u003c",
                            "version_name": "750-8208/xxx-xxx",
                            "version_value": "03.06.19 (18)"
                          },
                          {
                            "version_affected": "\u003c",
                            "version_name": "750-8210/xxx-xxx",
                            "version_value": "03.06.19 (18)"
                          },
                          {
                            "version_affected": "\u003c",
                            "version_name": "750-8211/xxx-xxx",
                            "version_value": "03.06.19 (18)"
                          },
                          {
                            "version_affected": "\u003c",
                            "version_name": "750-8212/xxx-xxx",
                            "version_value": "03.06.19 (18)"
                          },
                          {
                            "version_affected": "\u003c",
                            "version_name": "750-8213/xxx-xxx",
                            "version_value": "03.06.19 (18)"
                          },
                          {
                            "version_affected": "\u003c",
                            "version_name": "750-8214/xxx-xxx",
                            "version_value": "03.06.19 (18)"
                          },
                          {
                            "version_affected": "\u003c",
                            "version_name": "750-8216/xxx-xxx",
                            "version_value": "03.06.19 (18)"
                          },
                          {
                            "version_affected": "\u003c",
                            "version_name": "750-8217/xxx-xxx",
                            "version_value": "03.06.19 (18)"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "WAGO"
              }
            ]
          }
        },
        "credit": [
          {
            "lang": "eng",
            "value": "These vulnerabilities were reported by JSC Positive Technologies (Vyacheslav Moskvin, Anton Dorfman, Sergey Fedonin, Ivan Kurnakov, Denis Goryushev). Coordination done by CERT@VDE."
          }
        ],
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "On WAGO PFC200 devices in different firmware versions with special crafted packets an authorised attacker with network access to the device can access the file system with higher privileges."
            }
          ]
        },
        "generator": {
          "engine": "Vulnogram 0.0.9"
        },
        "impact": {
          "cvss": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 9.1,
            "baseSeverity": "CRITICAL",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "HIGH",
            "scope": "CHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H",
            "version": "3.1"
          }
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "CWE-22 Improper Limitation of a Pathname to a Restricted Directory (\u0027Path Traversal\u0027)"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "https://cert.vde.com/en-us/advisories/vde-2021-014",
              "refsource": "CONFIRM",
              "url": "https://cert.vde.com/en-us/advisories/vde-2021-014"
            }
          ]
        },
        "solution": [
          {
            "lang": "en",
            "value": "WAGO recommends all effected users with CODESYS 2.3 Runtime PLCs to update to the firmware versions listed at https://cert.vde.com/en-us/advisories/vde-2021-014 in the solution paragraph."
          }
        ],
        "source": {
          "advisory": "VDE-2021-014",
          "defect": [
            "VDE-2021-014"
          ],
          "discovery": "EXTERNAL"
        },
        "work_around": [
          {
            "lang": "en",
            "value": "Use general security best practices to protect systems from local and network attacks.\nDo not allow direct access to the device from untrusted networks.\nUpdate to the latest firmware according to the table in chapter solutions."
          }
        ]
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "270ccfa6-a436-4e77-922e-914ec3a9685c",
    "assignerShortName": "CERTVDE",
    "cveId": "CVE-2021-21001",
    "datePublished": "2021-05-24T11:05:06.147Z",
    "dateReserved": "2020-12-17T00:00:00.000Z",
    "dateUpdated": "2024-09-16T16:19:02.930Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

Sightings

Author	Source	Type	Date	Other

Nomenclature

Seen: The vulnerability was mentioned, discussed, or observed by the user.
Confirmed: The vulnerability has been validated from an analyst's perspective.
Published Proof of Concept: A public proof of concept is available for this vulnerability.
Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
Not confirmed: The user expressed doubt about the validity of the vulnerability.
Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.

Detection rules are retrieved from Rulezet.

The MITRE ATT&CK techniques below are AI-generated suggestions, inferred from the description of the vulnerability by the CIRCL/vulnerability-attack-technique-classification-roberta-base model, served locally by ML-Gateway. They have not been verified by an analyst and are provided for guidance only.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Browse all ATT&CK techniques and the vulnerabilities related to each.

Related by attack behaviour

Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.