published February 13, 2018
🚨 An unauthenticated route on Port 2455 is like an open invitation to a party nobody wanted to host! Think of the CoDeSys Runtime as a restaurant kitchen with the door wide open. Anyone can just walk in and start cooking — they could burn the place down or serve up whatever they want! An attacker could cause absolute chaos by reading, writing, or deleting critical files and even manipulating the PLC application while it's running. This could lead to devastating operational failures or unauthorized changes that impact the entire system's integrity.
Think of the CoDeSys Runtime as a restaurant kitchen with the door wide open. Anyone can just walk in and start cooking — they could burn the place down or serve up whatever they want! This vulnerability stems from improper authentication in the WAGO PFC200 Series 3S CoDeSys Runtime, allowing attackers to execute various commands without needing to log in. Specifically, they can send specially-crafted TCP packets to Port 2455 to take control of the system.
An attacker could cause absolute chaos by reading, writing, or deleting critical files and even manipulating the PLC application while it's running. This could lead to devastating operational failures or unauthorized changes that impact the entire system's integrity. To protect your systems, ensure that the CoDeSys Runtime is not accessible over the network by default, particularly on Port 2455. Additionally, apply strict firewall rules and consider updating to the latest versions available to mitigate vulnerabilities. Regularly audit network access to ensure only authorized personnel can connect. You've got this! With a few adjustments, you can keep your kitchen safe and secure! 🛡️