CVE-2021-34569CWE-787

WAGO I/O-Check Service prone to Out-of-bounds Write

Critical · published November 9, 2022

CVSS v3.1
9.8
EPSS
1%
Percentile
58.5
In the wild
Unconfirmed
What it is

🚨 Just one specially crafted packet can crash the WAGO I/O-Check Service and write memory like it’s a rebellious teenager with a keyboard!🔥 Think of it like a careless delivery driver who, instead of just dropping off the package, decides to rearrange the entire store. That’s what happens when an attacker sends their malicious commands, causing chaos in the diagnostic tool. 📦 The consequences could be absolutely devastating! An attacker might gain the ability to crash the diagnostic tool entirely, leading to potential service interruptions and loss of control over essential operations. Imagine critical systems grinding to a halt just because someone sent the wrong commands!

Put simply

Think of it like a careless delivery driver who, instead of just dropping off the package, decides to rearrange the entire store. That’s what happens when an attacker sends their malicious commands, causing chaos in the diagnostic tool. 📦 This vulnerability exists in the WAGO I/O-Check Service, allowing attackers to exploit specially crafted packets that contain OS commands, resulting in a crash and memory manipulation.

What to do

The consequences could be absolutely devastating! An attacker might gain the ability to crash the diagnostic tool entirely, leading to potential service interruptions and loss of control over essential operations. Imagine critical systems grinding to a halt just because someone sent the wrong commands! To safeguard your systems, immediately update to the latest version provided by WAGO. Ensure that all packages are verified, and consider implementing additional network security measures to filter out suspicious packets. You’ve got this! Follow these steps, and you’ll have your systems secure in no time. 🛡️

The record
Technical detail
CVSS v3.1
9.8 · CRITICAL
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00872 · 58.5th percentile
Weakness
CWE-787 · Out-of-bounds Write
Published
2022-11-09T15:17Z
EPSS history
Timeline
  • 09 NOV 15:17Z
    WAGO I/O-Check Service prone to Out-of-bounds Write
    cvelistv5