Vulnerability-Lookup

VAR-202108-0988

Vulnerability from variot - Updated: 2024-08-14 15:11

This vulnerability allows an attacker who has access to the WBM to read and write settings-parameters of the device by sending specifically constructed requests without authentication on multiple WAGO PLCs in firmware versions up to FW07. plural WAGO product There is an authentication vulnerability in.Information is obtained, information is tampered with, and service operation is interrupted. (DoS) It may be in a state

Show details on source website

JSON

To clipboard

{
  "@context": {
    "@vocab": "https://www.variotdbs.pl/ref/VARIoTentry#",
    "affected_products": {
      "@id": "https://www.variotdbs.pl/ref/affected_products"
    },
    "configurations": {
      "@id": "https://www.variotdbs.pl/ref/configurations"
    },
    "credits": {
      "@id": "https://www.variotdbs.pl/ref/credits"
    },
    "cvss": {
      "@id": "https://www.variotdbs.pl/ref/cvss/"
    },
    "description": {
      "@id": "https://www.variotdbs.pl/ref/description/"
    },
    "exploit_availability": {
      "@id": "https://www.variotdbs.pl/ref/exploit_availability/"
    },
    "external_ids": {
      "@id": "https://www.variotdbs.pl/ref/external_ids/"
    },
    "iot": {
      "@id": "https://www.variotdbs.pl/ref/iot/"
    },
    "iot_taxonomy": {
      "@id": "https://www.variotdbs.pl/ref/iot_taxonomy/"
    },
    "patch": {
      "@id": "https://www.variotdbs.pl/ref/patch/"
    },
    "problemtype_data": {
      "@id": "https://www.variotdbs.pl/ref/problemtype_data/"
    },
    "references": {
      "@id": "https://www.variotdbs.pl/ref/references/"
    },
    "sources": {
      "@id": "https://www.variotdbs.pl/ref/sources/"
    },
    "sources_release_date": {
      "@id": "https://www.variotdbs.pl/ref/sources_release_date/"
    },
    "sources_update_date": {
      "@id": "https://www.variotdbs.pl/ref/sources_update_date/"
    },
    "threat_type": {
      "@id": "https://www.variotdbs.pl/ref/threat_type/"
    },
    "title": {
      "@id": "https://www.variotdbs.pl/ref/title/"
    },
    "type": {
      "@id": "https://www.variotdbs.pl/ref/type/"
    }
  },
  "@id": "https://www.variotdbs.pl/vuln/VAR-202108-0988",
  "affected_products": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/affected_products#",
      "data": {
        "@container": "@list"
      },
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        },
        "@id": "https://www.variotdbs.pl/ref/sources"
      }
    },
    "data": [
      {
        "model": "750-890\\/040-000",
        "scope": "lte",
        "trust": 1.0,
        "vendor": "wago",
        "version": "fw07"
      },
      {
        "model": "750-890\\/025-000",
        "scope": "lte",
        "trust": 1.0,
        "vendor": "wago",
        "version": "fw07"
      },
      {
        "model": "750-823",
        "scope": "lte",
        "trust": 1.0,
        "vendor": "wago",
        "version": "fw07"
      },
      {
        "model": "750-832\\/000-002",
        "scope": "lte",
        "trust": 1.0,
        "vendor": "wago",
        "version": "fw07"
      },
      {
        "model": "750-862",
        "scope": "lte",
        "trust": 1.0,
        "vendor": "wago",
        "version": "fw07"
      },
      {
        "model": "750-362",
        "scope": "lte",
        "trust": 1.0,
        "vendor": "wago",
        "version": "fw07"
      },
      {
        "model": "750-890\\/025-001",
        "scope": "lte",
        "trust": 1.0,
        "vendor": "wago",
        "version": "fw07"
      },
      {
        "model": "750-893",
        "scope": "lte",
        "trust": 1.0,
        "vendor": "wago",
        "version": "fw07"
      },
      {
        "model": "750-832",
        "scope": "lte",
        "trust": 1.0,
        "vendor": "wago",
        "version": "fw07"
      },
      {
        "model": "750-363",
        "scope": "lte",
        "trust": 1.0,
        "vendor": "wago",
        "version": "fw07"
      },
      {
        "model": "750-890\\/025-002",
        "scope": "lte",
        "trust": 1.0,
        "vendor": "wago",
        "version": "fw07"
      },
      {
        "model": "750-891",
        "scope": "lte",
        "trust": 1.0,
        "vendor": "wago",
        "version": "fw07"
      },
      {
        "model": "750-832/000-002",
        "scope": null,
        "trust": 0.8,
        "vendor": "\u30ef\u30b4\u30b8\u30e3\u30d1\u30f3\u682a\u5f0f\u4f1a\u793e",
        "version": null
      },
      {
        "model": "750-862",
        "scope": null,
        "trust": 0.8,
        "vendor": "\u30ef\u30b4\u30b8\u30e3\u30d1\u30f3\u682a\u5f0f\u4f1a\u793e",
        "version": null
      },
      {
        "model": "750-362",
        "scope": null,
        "trust": 0.8,
        "vendor": "\u30ef\u30b4\u30b8\u30e3\u30d1\u30f3\u682a\u5f0f\u4f1a\u793e",
        "version": null
      },
      {
        "model": "750-890/025-001",
        "scope": null,
        "trust": 0.8,
        "vendor": "\u30ef\u30b4\u30b8\u30e3\u30d1\u30f3\u682a\u5f0f\u4f1a\u793e",
        "version": null
      },
      {
        "model": "750-890/040-000",
        "scope": null,
        "trust": 0.8,
        "vendor": "\u30ef\u30b4\u30b8\u30e3\u30d1\u30f3\u682a\u5f0f\u4f1a\u793e",
        "version": null
      },
      {
        "model": "750-890/025-002",
        "scope": null,
        "trust": 0.8,
        "vendor": "\u30ef\u30b4\u30b8\u30e3\u30d1\u30f3\u682a\u5f0f\u4f1a\u793e",
        "version": null
      },
      {
        "model": "750-832",
        "scope": null,
        "trust": 0.8,
        "vendor": "\u30ef\u30b4\u30b8\u30e3\u30d1\u30f3\u682a\u5f0f\u4f1a\u793e",
        "version": null
      },
      {
        "model": "750-823",
        "scope": null,
        "trust": 0.8,
        "vendor": "\u30ef\u30b4\u30b8\u30e3\u30d1\u30f3\u682a\u5f0f\u4f1a\u793e",
        "version": null
      },
      {
        "model": "750-890/025-000",
        "scope": null,
        "trust": 0.8,
        "vendor": "\u30ef\u30b4\u30b8\u30e3\u30d1\u30f3\u682a\u5f0f\u4f1a\u793e",
        "version": null
      },
      {
        "model": "750-363",
        "scope": null,
        "trust": 0.8,
        "vendor": "\u30ef\u30b4\u30b8\u30e3\u30d1\u30f3\u682a\u5f0f\u4f1a\u793e",
        "version": null
      }
    ],
    "sources": [
      {
        "db": "JVNDB",
        "id": "JVNDB-2021-011289"
      },
      {
        "db": "NVD",
        "id": "CVE-2021-34578"
      }
    ]
  },
  "cve": "CVE-2021-34578",
  "cvss": {
    "@context": {
      "cvssV2": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/cvss/cvssV2#"
        },
        "@id": "https://www.variotdbs.pl/ref/cvss/cvssV2"
      },
      "cvssV3": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/cvss/cvssV3#"
        },
        "@id": "https://www.variotdbs.pl/ref/cvss/cvssV3/"
      },
      "severity": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/cvss/severity#"
        },
        "@id": "https://www.variotdbs.pl/ref/cvss/severity"
      },
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        },
        "@id": "https://www.variotdbs.pl/ref/sources"
      }
    },
    "data": [
      {
        "cvssV2": [
          {
            "accessComplexity": "MEDIUM",
            "accessVector": "NETWORK",
            "authentication": "NONE",
            "author": "nvd@nist.gov",
            "availabilityImpact": "PARTIAL",
            "baseScore": 6.8,
            "confidentialityImpact": "PARTIAL",
            "exploitabilityScore": 8.6,
            "id": "CVE-2021-34578",
            "impactScore": 6.4,
            "integrityImpact": "PARTIAL",
            "severity": "MEDIUM",
            "trust": 1.9,
            "vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "version": "2.0"
          }
        ],
        "cvssV3": [
          {
            "attackComplexity": "HIGH",
            "attackVector": "NETWORK",
            "author": "nvd@nist.gov",
            "availabilityImpact": "HIGH",
            "baseScore": 8.1,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "exploitabilityScore": 2.2,
            "id": "CVE-2021-34578",
            "impactScore": 5.9,
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "trust": 1.0,
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "author": "info@cert.vde.com",
            "availabilityImpact": "HIGH",
            "baseScore": 9.8,
            "baseSeverity": "CRITICAL",
            "confidentialityImpact": "HIGH",
            "exploitabilityScore": 3.9,
            "id": "CVE-2021-34578",
            "impactScore": 5.9,
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "trust": 1.0,
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          {
            "attackComplexity": "High",
            "attackVector": "Network",
            "author": "NVD",
            "availabilityImpact": "High",
            "baseScore": 8.1,
            "baseSeverity": "High",
            "confidentialityImpact": "High",
            "exploitabilityScore": null,
            "id": "CVE-2021-34578",
            "impactScore": null,
            "integrityImpact": "High",
            "privilegesRequired": "None",
            "scope": "Unchanged",
            "trust": 0.8,
            "userInteraction": "None",
            "vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.0"
          }
        ],
        "severity": [
          {
            "author": "nvd@nist.gov",
            "id": "CVE-2021-34578",
            "trust": 1.0,
            "value": "HIGH"
          },
          {
            "author": "info@cert.vde.com",
            "id": "CVE-2021-34578",
            "trust": 1.0,
            "value": "CRITICAL"
          },
          {
            "author": "NVD",
            "id": "CVE-2021-34578",
            "trust": 0.8,
            "value": "High"
          },
          {
            "author": "CNNVD",
            "id": "CNNVD-202108-2776",
            "trust": 0.6,
            "value": "HIGH"
          },
          {
            "author": "VULMON",
            "id": "CVE-2021-34578",
            "trust": 0.1,
            "value": "MEDIUM"
          }
        ]
      }
    ],
    "sources": [
      {
        "db": "VULMON",
        "id": "CVE-2021-34578"
      },
      {
        "db": "JVNDB",
        "id": "JVNDB-2021-011289"
      },
      {
        "db": "CNNVD",
        "id": "CNNVD-202108-2776"
      },
      {
        "db": "NVD",
        "id": "CVE-2021-34578"
      },
      {
        "db": "NVD",
        "id": "CVE-2021-34578"
      }
    ]
  },
  "description": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/description#",
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        }
      }
    },
    "data": "This vulnerability allows an attacker who has access to the WBM to read and write settings-parameters of the device by sending specifically constructed requests without authentication on multiple WAGO PLCs in firmware versions up to FW07. plural WAGO product There is an authentication vulnerability in.Information is obtained, information is tampered with, and service operation is interrupted. (DoS) It may be in a state",
    "sources": [
      {
        "db": "NVD",
        "id": "CVE-2021-34578"
      },
      {
        "db": "JVNDB",
        "id": "JVNDB-2021-011289"
      },
      {
        "db": "VULMON",
        "id": "CVE-2021-34578"
      }
    ],
    "trust": 1.71
  },
  "external_ids": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/external_ids#",
      "data": {
        "@container": "@list"
      },
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        }
      }
    },
    "data": [
      {
        "db": "NVD",
        "id": "CVE-2021-34578",
        "trust": 3.3
      },
      {
        "db": "CERT@VDE",
        "id": "VDE-2020-044",
        "trust": 2.5
      },
      {
        "db": "JVNDB",
        "id": "JVNDB-2021-011289",
        "trust": 0.8
      },
      {
        "db": "CNNVD",
        "id": "CNNVD-202108-2776",
        "trust": 0.6
      },
      {
        "db": "VULMON",
        "id": "CVE-2021-34578",
        "trust": 0.1
      }
    ],
    "sources": [
      {
        "db": "VULMON",
        "id": "CVE-2021-34578"
      },
      {
        "db": "JVNDB",
        "id": "JVNDB-2021-011289"
      },
      {
        "db": "CNNVD",
        "id": "CNNVD-202108-2776"
      },
      {
        "db": "NVD",
        "id": "CVE-2021-34578"
      }
    ]
  },
  "id": "VAR-202108-0988",
  "iot": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/iot#",
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        }
      }
    },
    "data": true,
    "sources": [
      {
        "db": "VARIoT devices database",
        "id": null
      }
    ],
    "trust": 0.238333332
  },
  "last_update_date": "2024-08-14T15:11:49.351000Z",
  "patch": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/patch#",
      "data": {
        "@container": "@list"
      },
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        }
      }
    },
    "data": [
      {
        "title": "top page",
        "trust": 0.8,
        "url": "https://www.wago.co.jp/"
      },
      {
        "title": "WAGO Remediation measures for authorization problem vulnerabilities",
        "trust": 0.6,
        "url": "http://www.cnnvd.org.cn/web/xxk/bdxqById.tag?id=161863"
      }
    ],
    "sources": [
      {
        "db": "JVNDB",
        "id": "JVNDB-2021-011289"
      },
      {
        "db": "CNNVD",
        "id": "CNNVD-202108-2776"
      }
    ]
  },
  "problemtype_data": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/problemtype_data#",
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        }
      }
    },
    "data": [
      {
        "problemtype": "CWE-287",
        "trust": 1.0
      },
      {
        "problemtype": "Inappropriate authentication (CWE-287) [ others ]",
        "trust": 0.8
      }
    ],
    "sources": [
      {
        "db": "JVNDB",
        "id": "JVNDB-2021-011289"
      },
      {
        "db": "NVD",
        "id": "CVE-2021-34578"
      }
    ]
  },
  "references": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/references#",
      "data": {
        "@container": "@list"
      },
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        }
      }
    },
    "data": [
      {
        "trust": 1.7,
        "url": "https://cert.vde.com/en-us/advisories/vde-2020-044"
      },
      {
        "trust": 1.4,
        "url": "https://nvd.nist.gov/vuln/detail/cve-2021-34578"
      },
      {
        "trust": 0.8,
        "url": "https://cert.vde.com/en/advisories/vde-2020-044/"
      },
      {
        "trust": 0.1,
        "url": "https://cwe.mitre.org/data/definitions/287.html"
      },
      {
        "trust": 0.1,
        "url": "https://nvd.nist.gov"
      }
    ],
    "sources": [
      {
        "db": "VULMON",
        "id": "CVE-2021-34578"
      },
      {
        "db": "JVNDB",
        "id": "JVNDB-2021-011289"
      },
      {
        "db": "CNNVD",
        "id": "CNNVD-202108-2776"
      },
      {
        "db": "NVD",
        "id": "CVE-2021-34578"
      }
    ]
  },
  "sources": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/sources#",
      "data": {
        "@container": "@list"
      }
    },
    "data": [
      {
        "db": "VULMON",
        "id": "CVE-2021-34578"
      },
      {
        "db": "JVNDB",
        "id": "JVNDB-2021-011289"
      },
      {
        "db": "CNNVD",
        "id": "CNNVD-202108-2776"
      },
      {
        "db": "NVD",
        "id": "CVE-2021-34578"
      }
    ]
  },
  "sources_release_date": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/sources_release_date#",
      "data": {
        "@container": "@list"
      }
    },
    "data": [
      {
        "date": "2021-08-31T00:00:00",
        "db": "VULMON",
        "id": "CVE-2021-34578"
      },
      {
        "date": "2022-07-26T00:00:00",
        "db": "JVNDB",
        "id": "JVNDB-2021-011289"
      },
      {
        "date": "2021-08-31T00:00:00",
        "db": "CNNVD",
        "id": "CNNVD-202108-2776"
      },
      {
        "date": "2021-08-31T11:15:07.777000",
        "db": "NVD",
        "id": "CVE-2021-34578"
      }
    ]
  },
  "sources_update_date": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/sources_update_date#",
      "data": {
        "@container": "@list"
      }
    },
    "data": [
      {
        "date": "2021-09-08T00:00:00",
        "db": "VULMON",
        "id": "CVE-2021-34578"
      },
      {
        "date": "2022-07-26T03:25:00",
        "db": "JVNDB",
        "id": "JVNDB-2021-011289"
      },
      {
        "date": "2021-09-09T00:00:00",
        "db": "CNNVD",
        "id": "CNNVD-202108-2776"
      },
      {
        "date": "2021-09-08T16:02:25.067000",
        "db": "NVD",
        "id": "CVE-2021-34578"
      }
    ]
  },
  "threat_type": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/threat_type#",
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        }
      }
    },
    "data": "remote",
    "sources": [
      {
        "db": "CNNVD",
        "id": "CNNVD-202108-2776"
      }
    ],
    "trust": 0.6
  },
  "title": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/title#",
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        }
      }
    },
    "data": "plural \u00a0WAGO\u00a0 product \u00a0 Authentication vulnerability in",
    "sources": [
      {
        "db": "JVNDB",
        "id": "JVNDB-2021-011289"
      }
    ],
    "trust": 0.8
  },
  "type": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/type#",
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        }
      }
    },
    "data": "authorization issue",
    "sources": [
      {
        "db": "CNNVD",
        "id": "CNNVD-202108-2776"
      }
    ],
    "trust": 0.6
  }
}

CVE-2021-34578 (GCVE-0-2021-34578)

Vulnerability from cvelistv5 – Published: 2021-08-31 10:33 – Updated: 2024-09-16 18:33

Title

WAGO: Authentication Vulnerability in Web-Based Management

Summary

Severity ?

9.8 (Critical)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

CWE

CWE-287 - Improper Authentication

Assigner

CERTVDE

References

URL

Tags

https://cert.vde.com/en-us/advisories/vde-2020-044

x_refsource_CONFIRM

Impacted products

	Vendor	Product	Version
	WAGO	PLC	Affected: 750-362 , ≤ FW07 (custom) Affected: 750-363 , ≤ FW07 (custom) Affected: 750-823 , ≤ FW07 (custom) Affected: 750-832/xxx-xxx , ≤ FW07 (custom) Affected: 750-862 , ≤ FW07 (custom) Affected: 750-891 , ≤ FW07 (custom) Affected: 750-890/xxx-xxx , ≤ FW07 (custom) Affected: 750-893 , ≤ FW07 (custom)

Credits

Maxim Rupp (https://rupp.it) reported this vulnerability to WAGO. CERT@VDE coordinated.

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-04T00:19:47.008Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://cert.vde.com/en-us/advisories/vde-2020-044"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "PLC",
          "vendor": "WAGO",
          "versions": [
            {
              "lessThanOrEqual": "FW07",
              "status": "affected",
              "version": "750-362",
              "versionType": "custom"
            },
            {
              "lessThanOrEqual": "FW07",
              "status": "affected",
              "version": "750-363",
              "versionType": "custom"
            },
            {
              "lessThanOrEqual": "FW07",
              "status": "affected",
              "version": "750-823",
              "versionType": "custom"
            },
            {
              "lessThanOrEqual": "FW07",
              "status": "affected",
              "version": "750-832/xxx-xxx",
              "versionType": "custom"
            },
            {
              "lessThanOrEqual": "FW07",
              "status": "affected",
              "version": "750-862",
              "versionType": "custom"
            },
            {
              "lessThanOrEqual": "FW07",
              "status": "affected",
              "version": "750-891",
              "versionType": "custom"
            },
            {
              "lessThanOrEqual": "FW07",
              "status": "affected",
              "version": "750-890/xxx-xxx",
              "versionType": "custom"
            },
            {
              "lessThanOrEqual": "FW07",
              "status": "affected",
              "version": "750-893",
              "versionType": "custom"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "value": "Maxim Rupp (https://rupp.it) reported this vulnerability to WAGO. CERT@VDE coordinated."
        }
      ],
      "datePublic": "2021-08-31T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "This vulnerability allows an attacker who has access to the WBM to read and write settings-parameters of the device by sending specifically constructed requests without authentication on multiple WAGO PLCs in firmware versions up to FW07."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 9.8,
            "baseSeverity": "CRITICAL",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          }
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-287",
              "description": "CWE-287 Improper Authentication",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2021-08-31T10:33:01",
        "orgId": "270ccfa6-a436-4e77-922e-914ec3a9685c",
        "shortName": "CERTVDE"
      },
      "references": [
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://cert.vde.com/en-us/advisories/vde-2020-044"
        }
      ],
      "solutions": [
        {
          "lang": "en",
          "value": "Update the device to the latest FW version."
        }
      ],
      "source": {
        "advisory": "VDE-2020-044",
        "discovery": "EXTERNAL"
      },
      "title": "WAGO: Authentication Vulnerability in Web-Based Management",
      "workarounds": [
        {
          "lang": "en",
          "value": "Restrict network access to the device.\nDo not directly connect the device to the internet.\nDisable unused TCP/UDP ports.\nDisable web-based management ports 80/443 after the configuration phase"
        }
      ],
      "x_generator": {
        "engine": "Vulnogram 0.0.9"
      },
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "info@cert.vde.com",
          "DATE_PUBLIC": "2021-08-31T07:00:00.000Z",
          "ID": "CVE-2021-34578",
          "STATE": "PUBLIC",
          "TITLE": "WAGO: Authentication Vulnerability in Web-Based Management"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "PLC",
                      "version": {
                        "version_data": [
                          {
                            "version_affected": "\u003c=",
                            "version_name": "750-362",
                            "version_value": "FW07"
                          },
                          {
                            "version_affected": "\u003c=",
                            "version_name": "750-363",
                            "version_value": "FW07"
                          },
                          {
                            "version_affected": "\u003c=",
                            "version_name": "750-823",
                            "version_value": "FW07"
                          },
                          {
                            "version_affected": "\u003c=",
                            "version_name": "750-832/xxx-xxx",
                            "version_value": "FW07"
                          },
                          {
                            "version_affected": "\u003c=",
                            "version_name": "750-862",
                            "version_value": "FW07"
                          },
                          {
                            "version_affected": "\u003c=",
                            "version_name": "750-891",
                            "version_value": "FW07"
                          },
                          {
                            "version_affected": "\u003c=",
                            "version_name": "750-890/xxx-xxx",
                            "version_value": "FW07"
                          },
                          {
                            "version_affected": "\u003c=",
                            "version_name": "750-893",
                            "version_value": "FW07"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "WAGO"
              }
            ]
          }
        },
        "credit": [
          {
            "lang": "eng",
            "value": "Maxim Rupp (https://rupp.it) reported this vulnerability to WAGO. CERT@VDE coordinated."
          }
        ],
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "This vulnerability allows an attacker who has access to the WBM to read and write settings-parameters of the device by sending specifically constructed requests without authentication on multiple WAGO PLCs in firmware versions up to FW07."
            }
          ]
        },
        "generator": {
          "engine": "Vulnogram 0.0.9"
        },
        "impact": {
          "cvss": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 9.8,
            "baseSeverity": "CRITICAL",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          }
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "CWE-287 Improper Authentication"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "https://cert.vde.com/en-us/advisories/vde-2020-044",
              "refsource": "CONFIRM",
              "url": "https://cert.vde.com/en-us/advisories/vde-2020-044"
            }
          ]
        },
        "solution": [
          {
            "lang": "en",
            "value": "Update the device to the latest FW version."
          }
        ],
        "source": {
          "advisory": "VDE-2020-044",
          "discovery": "EXTERNAL"
        },
        "work_around": [
          {
            "lang": "en",
            "value": "Restrict network access to the device.\nDo not directly connect the device to the internet.\nDisable unused TCP/UDP ports.\nDisable web-based management ports 80/443 after the configuration phase"
          }
        ]
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "270ccfa6-a436-4e77-922e-914ec3a9685c",
    "assignerShortName": "CERTVDE",
    "cveId": "CVE-2021-34578",
    "datePublished": "2021-08-31T10:33:01.868564Z",
    "dateReserved": "2021-06-10T00:00:00",
    "dateUpdated": "2024-09-16T18:33:25.112Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

Sightings

Author	Source	Type	Date

Nomenclature

Seen: The vulnerability was mentioned, discussed, or observed by the user.
Confirmed: The vulnerability has been validated from an analyst's perspective.
Published Proof of Concept: A public proof of concept is available for this vulnerability.
Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
Not confirmed: The user expressed doubt about the validity of the vulnerability.
Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.

Detection rules are retrieved from Rulezet.

Action not permitted

VAR-202108-0988

CVE-2021-34578 (GCVE-0-2021-34578)

Tags

Sightings

Nomenclature