CVE-2018-8836: WAGO 750 Series vulnerability
WAGO · WAGO 750 Series
Affected: WAGO 750 Series · Exploitation: possible (1 to 10%)
Not in CyberSIXT coverage yet: no article names this CVE. This page shows the public record.
Higher than 89% of scored CVEs
Not scored yet. The CVE record carries no CVSS score.
DescriptionCVE.org
Wago 750 Series PLCs with firmware version 10 and prior include a remote attack may take advantage of an improper implementation of the 3 way handshake during a TCP connection affecting the communications with commission and service tools. Specially crafted packets may also be sent to Port 2455/TCP/IP, used in Codesys management software, which may result in a denial-of-service condition of communications with commissioning and service tools.
Affected products1
From the CVE record. A product or version that is not listed is unknown, not unaffected.
- WAGO · WAGO 750 Series750-880 firmware version 10 and prior; 750-881 firmware version 10 and prior; 750-852 firmware version 10 and prior; 750-882 firmware version 10 and prior; 750-885 firmware version 10 and prior; 750-831 firmware version 10 and prior and 2 more
On the Atlas
Every published CVE is on the CyberSIXT Atlas, grouped by weakness, vendor and month.
- Exploitation
- Possible (1 to 10%). EPSS between 1% and 10%.
- CISA KEV
- Not listed
- Public check
- No public nuclei template
- Vendor
- WAGO
- Published
- April 2018
CoverageNo articles yet
No CyberSIXT article names CVE-2018-8836 yet, so there is no coverage timeline, action brief or change log for it. Everything on this page comes from the public CVE record, CISA KEV, EPSS and the nuclei template index. Search the archive or see the CVEs in the news.