CVE-2023-5188CWE-20

WAGO Improper Input Validation in IEC61850 Server / Telecontrol

High · published December 5, 2023

CVSS v3.1
7.5
EPSS
1%
Percentile
63.6
In the wild
Unconfirmed
What it is

The MMS Interpreter of WagoAppRTU in versions below 1.4.6.0 which is used by the WAGO Telecontrol Configurator is vulnerable to malformed packets. An remote unauthenticated attacker could send specifically crafted packets that lead to a denial-of-service condition until restart of the affected device.

The record
Technical detail
CVSS v3.1
7.5 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CVSS v4.0
Not supplied
EPSS
0.01036 · 63.6th percentile
Weakness
CWE-20 · Improper Input Validation
Published
2023-12-05T07:19Z
EPSS history
Timeline
  • 05 DEC 07:19Z
    WAGO Improper Input Validation in IEC61850 Server / Telecontrol
    cvelistv5