{"dataType": "CVE_RECORD", "dataVersion": "5.0", "cveMetadata": {"cveId": "CVE-2023-1150", "assignerOrgId": "270ccfa6-a436-4e77-922e-914ec3a9685c", "state": "PUBLISHED", "assignerShortName": "CERTVDE", "dateReserved": "2023-03-02T05:38:38.812Z", "datePublished": "2023-06-26T06:19:53.942Z", "dateUpdated": "2023-06-26T06:19:53.942Z"}, "containers": {"cna": {"affected": [{"defaultStatus": "unaffected", "product": "750-332", "vendor": "WAGO", "versions": [{"lessThanOrEqual": "FW10", "status": "affected", "version": "0", "versionType": "semver"}]}, {"defaultStatus": "unaffected", "product": "750-362/xxx-xxx", "vendor": "WAGO", "versions": [{"lessThanOrEqual": "FW10", "status": "affected", "version": "0", "versionType": "semver"}]}, {"defaultStatus": "unaffected", "product": "750-363/xxx-xxx", "vendor": "WAGO", "versions": [{"lessThanOrEqual": "FW10", "status": "affected", "version": "0", "versionType": "semver"}]}, {"defaultStatus": "unaffected", "product": "750-364/xxx-xxx", "vendor": "WAGO", "versions": [{"lessThanOrEqual": "FW10", "status": "affected", "version": "0", "versionType": "semver"}]}, {"defaultStatus": "unaffected", "product": "750-365/xxx-xxx", "vendor": "WAGO", "versions": [{"lessThanOrEqual": "FW10", "status": "affected", "version": "0", "versionType": "semver"}]}, {"defaultStatus": "unaffected", "product": "750-823", "vendor": "WAGO", "versions": [{"lessThanOrEqual": "FW10", "status": "affected", "version": "0", "versionType": "semver"}]}, {"defaultStatus": "unaffected", "product": "750-832/xxx-xxx", "vendor": "WAGO", "versions": [{"lessThanOrEqual": "FW10", "status": "affected", "version": "0", "versionType": "semver"}]}, {"defaultStatus": "unaffected", "product": "750-862", "vendor": "WAGO", "versions": [{"lessThanOrEqual": "FW10", "status": "affected", "version": "0", "versionType": "semver"}]}, {"defaultStatus": "unaffected", "product": "750-890/xxx-xxx", "vendor": "WAGO", "versions": [{"lessThanOrEqual": "FW10", "status": "affected", "version": "0", "versionType": "semver"}]}, {"defaultStatus": "unaffected", "product": "750-891", "vendor": "WAGO", "versions": [{"lessThanOrEqual": "FW10", "status": "affected", "version": "0", "versionType": "semver"}]}, {"defaultStatus": "unaffected", "product": "750-893", "vendor": "WAGO", "versions": [{"lessThanOrEqual": "FW10", "status": "affected", "version": "0", "versionType": "semver"}]}], "credits": [{"lang": "en", "type": "reporter", "user": "00000000-0000-4000-9000-000000000000", "value": "Roman Ezhov from Kaspersky"}], "descriptions": [{"lang": "en", "supportingMedia": [{"base64": false, "type": "text/html", "value": "Uncontrolled resource consumption in Series WAGO 750-3x/-8x products may allow an unauthenticated remote attacker to DoS the MODBUS server with specially crafted packets."}], "value": "Uncontrolled resource consumption in Series WAGO 750-3x/-8x products may allow an unauthenticated remote attacker to DoS the MODBUS server with specially crafted packets."}], "metrics": [{"cvssV3_1": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 7.5, "baseSeverity": "HIGH", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "version": "3.1"}, "format": "CVSS", "scenarios": [{"lang": "en", "value": "GENERAL"}]}], "problemTypes": [{"descriptions": [{"cweId": "CWE-400", "description": "CWE-400 Uncontrolled Resource Consumption", "lang": "en", "type": "CWE"}]}], "providerMetadata": {"orgId": "270ccfa6-a436-4e77-922e-914ec3a9685c", "shortName": "CERTVDE", "dateUpdated": "2023-06-26T06:19:53.942Z"}, "references": [{"url": "https://cert.vde.com/en/advisories/VDE-2023-005/"}], "source": {"advisory": "VDE-2023-005", "defect": ["CERT@VDE#64392"], "discovery": "EXTERNAL"}, "title": "WAGO: Series 750-3x/-8x prone to MODBUS server DoS", "x_generator": {"engine": "Vulnogram 0.1.0-dev"}}}}

{"configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:wago:750-363\\/040-000_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "9A35B342-9D43-4D79-A350-0881F77E85F1", "versionEndExcluding": "fw11", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:wago:750-363\\/040-000:-:*:*:*:*:*:*:*", "matchCriteriaId": "2A2ACE30-6FC4-4AAE-8EEF-D8F3C3CE814F", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:wago:750-362\\/040-000_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "B010D10D-608D-499F-B5E7-5D768EA95242", "versionEndExcluding": "fw11", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:wago:750-362\\/040-000:-:*:*:*:*:*:*:*", "matchCriteriaId": "05A3A21A-1E9D-458E-9385-93DD645AA04B", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:wago:750-362\\/000-001_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "1FAC91DD-6F37-441C-BA36-AD969ABAD4C0", "versionEndExcluding": "fw11", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:wago:750-362\\/000-001:-:*:*:*:*:*:*:*", "matchCriteriaId": "18F9CAA7-5ED8-4ACE-BBF9-0453C1BABDA4", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:wago:750-891_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "5778A709-DBFB-450A-B333-A58F69461A00", "versionEndExcluding": "fw11", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:wago:750-891:-:*:*:*:*:*:*:*", "matchCriteriaId": "22BAABD9-A10D-4904-AA02-C37C4490B47A", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:wago:750-365\\/040-010_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "2CAED5DA-800C-4442-BC88-3AC82180F1AA", "versionEndExcluding": "fw11", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:wago:750-365\\/040-010:-:*:*:*:*:*:*:*", "matchCriteriaId": "A3B754A9-F107-4336-8B80-D74B4EC0A606", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:wago:750-364\\/040-010_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "87F9FA7F-D1B8-4C5E-9981-067A2D66E015", "versionEndExcluding": "fw11", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:wago:750-364\\/040-010:-:*:*:*:*:*:*:*", "matchCriteriaId": "C2DD0E12-B916-4D5D-8407-D642A2B79998", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:wago:750-362_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "496AE8E5-8E5A-4D93-9D1E-F558AC67B292", "versionEndExcluding": "fw11", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:wago:750-362:-:*:*:*:*:*:*:*", "matchCriteriaId": "6330A839-FAE3-43EB-B1AA-BA6844D9906D", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:wago:750-363_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "7FCCCC46-B213-4EC8-B8DF-BE7774C7731E", "versionEndExcluding": "fw11", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:wago:750-363:-:*:*:*:*:*:*:*", "matchCriteriaId": "54E13E9C-226E-4BD6-8F0C-3061092E892A", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:wago:750-823_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "00E7270D-BA8B-482E-B15B-5F92F8646CB8", "versionEndExcluding": "fw11", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:wago:750-823:-:*:*:*:*:*:*:*", "matchCriteriaId": "CB88572A-CB05-4B52-8BFC-05EFDC819244", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:wago:750-832_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "324FC413-AC5B-41A7-891A-F1A804F8C25E", "versionEndExcluding": "fw11", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:wago:750-832:-:*:*:*:*:*:*:*", "matchCriteriaId": "13D1FA8D-C8BA-4D1C-8372-DECD40177631", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:wago:750-832\\/000-002_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "291B13B5-3895-4F06-9CB9-C81BBE4961C2", "versionEndExcluding": "fw11", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:wago:750-832\\/000-002:-:*:*:*:*:*:*:*", "matchCriteriaId": "0F21D094-AE7C-4501-83F1-0884CB549F3A", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:wago:750-862_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "CE4410A1-EF14-47A1-91BB-30AD9340E38C", "versionEndExcluding": "fw11", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:wago:750-862:-:*:*:*:*:*:*:*", "matchCriteriaId": "FA04FBFB-9E1C-4618-9FDC-70675506D8D5", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:wago:750-890_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "A7519056-04A3-4E7A-AF71-BF459E0E6141", "versionEndExcluding": "fw11", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:wago:750-890:-:*:*:*:*:*:*:*", "matchCriteriaId": "11751A8B-FCFD-433B-9065-B4FC85168A93", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:wago:750-890\\/025-000_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "F67429CE-3C16-4EB8-8373-F963947FCB17", "versionEndExcluding": "fw11", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:wago:750-890\\/025-000:-:*:*:*:*:*:*:*", "matchCriteriaId": "DA0B4137-C73C-47D0-8489-CA0EF41ED9A9", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:wago:750-890\\/025-001_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "D88C6F15-0379-47C4-ADB4-9CB7661AD044", "versionEndExcluding": "fw11", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:wago:750-890\\/025-001:-:*:*:*:*:*:*:*", "matchCriteriaId": "BC2C91AA-9BD8-4856-B9AB-8E6CEAF8C8EC", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:wago:750-890\\/025-002_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "B2C70D5A-7780-40B4-B3A9-79964324E32C", "versionEndExcluding": "fw11", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:wago:750-890\\/025-002:-:*:*:*:*:*:*:*", "matchCriteriaId": "21EB6B55-D27F-4939-832A-A391F6A3E89A", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:wago:750-890\\/040-000_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "26E6806C-0EEF-4772-A64D-1C2124518991", "versionEndExcluding": "fw11", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:wago:750-890\\/040-000:-:*:*:*:*:*:*:*", "matchCriteriaId": "7862FE67-A0D9-4E4D-B7BD-EB70CF0260A7", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:wago:750-893_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "94C15A80-4AB7-46A8-8ADC-A57A07F4CFA4", "versionEndExcluding": "fw11", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:wago:750-893:-:*:*:*:*:*:*:*", "matchCriteriaId": "4D4795D0-B90B-4643-8713-88D89172D1A5", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}], "descriptions": [{"lang": "en", "value": "Uncontrolled resource consumption in Series WAGO 750-3x/-8x products may allow an unauthenticated remote attacker to DoS the MODBUS server with specially crafted packets."}], "id": "CVE-2023-1150", "lastModified": "2023-07-06T18:58:33.670", "metrics": {"cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 7.5, "baseSeverity": "HIGH", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "version": "3.1"}, "exploitabilityScore": 3.9, "impactScore": 3.6, "source": "info@cert.vde.com", "type": "Primary"}]}, "published": "2023-06-26T07:15:08.877", "references": [{"source": "info@cert.vde.com", "tags": ["Third Party Advisory"], "url": "https://cert.vde.com/en/advisories/VDE-2023-005/"}], "sourceIdentifier": "info@cert.vde.com", "vulnStatus": "Analyzed", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-400"}], "source": "info@cert.vde.com", "type": "Primary"}]}

{}