CVE-2021-21000CWE-770

WAGO: PFC200 Denial of Service due to the number of connections to the runtime

Medium · published May 24, 2021

CVSS v3.1
5.3
EPSS
1%
Percentile
63.6
In the wild
Unconfirmed
What it is

On WAGO PFC200 devices in different firmware versions with special crafted packets an attacker with network access to the device could cause a denial of service for the login service of the runtime.

The record
Technical detail
CVSS v3.1
5.3 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
CVSS v4.0
Not supplied
EPSS
0.01037 · 63.6th percentile
Weakness
CWE-770 · Allocation of Resources Without Limits or Throttling
Published
2021-05-24T11:05Z
EPSS history
Timeline
  • 24 MAY 11:05Z
    WAGO: PFC200 Denial of Service due to the number of connections to the runtime
    cvelistv5