{ "document": { "category": "csaf_security_advisory", "csaf_version": "2.0", "tracking": { "generator": { "date": "2025-04-02T08:44:40.804Z", "engine": { "version": "2.5.18", "name": "Secvisogram" } }, "id": "VDE-2020-042", "version": "3", "status": "final", "aliases": [ "VDE-2020-042" ], "revision_history": [ { "number": "1", "summary": "initial revision", "date": "2020-10-27T10:28:00.000Z" }, { "date": "2025-04-02T10:00:00.000Z", "number": "2", "summary": "Update: deleted Issuing authority" }, { "number": "3", "summary": "Fix: added distribution", "date": "2025-05-14T13:00:14.000Z" } ], "current_release_date": "2025-05-14T13:00:14.000Z", "initial_release_date": "2020-10-27T10:28:00.000Z" }, "lang": "en-GB", "title": "WAGO: PLC families 750-88x and 750-352 prone to DoS attack, versions < FW10 (Update A)", "acknowledgments": [ { "organization": "CERTVDE", "urls": [ "https://certvde.com" ], "summary": "coordination" }, { "organization": "WAGO GmbH & Co. KG", "names": [ "William Knowles" ], "urls": [ "https://www.wago.com" ], "summary": "reporting" } ], "distribution": { "tlp": { "label": "WHITE", "url": "https://www.first.org/tlp/" } }, "notes": [ { "category": "summary", "title": "Summary", "text": "The Web-Based Management (WBM) of WAGOs programmable logic controller (PLC) is typically used for administration, commissioning and updates.\nOlder firmware versions of the PLC family 750-88x and 750-352 are vulnerable for a special denial of service attack.\n\nAll newer Firmware releases since FW11, released in December 2017, are not affected." }, { "category": "description", "title": "Impact", "text": "An attacker which sends a series of maliciously constructed packets to HTTP(S) ports 80/443 could cause a crashed device, that needs a power on reset to go back to normal operation." }, { "category": "description", "title": "Mitigation", "text": "* Restrict network access to the device.\n* Do not directly connect the device to the internet\n* Disable unused TCP/UDP-ports" }, { "category": "description", "title": "Remediation", "text": "Update the device to the latest FW version available here:\n\nhttps://www.wago.com/us/requestDownload?downloadFile=FWMedia_58_750-881" } ], "publisher": { "name": "WAGO GmbH & Co. KG", "contact_details": "psirt@wago.com", "category": "vendor", "namespace": "https://www.wago.com/psirt" }, "references": [ { "summary": "CERT@VDE Security Advisories for WAGO", "url": "https://certvde.com/en/advisories/vendor/wago/", "category": "external" }, { "category": "self", "url": "https://certvde.com/en/advisories/VDE-2020-042/", "summary": "VDE-2020-042: WAGO: PLC families 750-88x and 750-352 prone to DoS attack, versions < FW10 (Update A) - HTML" }, { "summary": "VDE-2020-042: WAGO: PLC families 750-88x and 750-352 prone to DoS attack, versions < FW10 (Update A) - CSAF", "url": "https://wago.csaf-tp.certvde.com/.well-known/csaf/white/2020/vde-2020-042.json", "category": "self" } ] }, "product_tree": { "branches": [ { "category": "vendor", "name": "WAGO GmbH & Co. KG", "branches": [ { "category": "product_family", "name": "Hardware", "branches": [ { "category": "product_name", "name": "750-331/xxx-xxx", "product": { "name": "750-331/xxx-xxx", "product_id": "CSAFPID-11001", "product_identification_helper": { "model_numbers": [ "750-331/xxx-xxx" ] } } }, { "category": "product_name", "name": "750-352", "product": { "name": "750-352", "product_id": "CSAFPID-11002", "product_identification_helper": { "model_numbers": [ "750-352" ] } } }, { "category": "product_name", "name": "750-829", "product": { "name": "750-829", "product_id": "CSAFPID-11003", "product_identification_helper": { "model_numbers": [ "750-829" ] } } }, { "category": "product_name", "name": "750-831/xxx-xxx", "product": { "name": "750-831/xxx-xxx", "product_id": "CSAFPID-11004", "product_identification_helper": { "model_numbers": [ "750-831/xxx-xxx" ] } } }, { "category": "product_name", "name": "750-852", "product": { "name": "750-852", "product_id": "CSAFPID-11005", "product_identification_helper": { "model_numbers": [ "750-852" ] } } }, { "category": "product_name", "name": "750-880/xxx-xxx", "product": { "name": "750-880/xxx-xxx", "product_id": "CSAFPID-11006", "product_identification_helper": { "model_numbers": [ "750-880/xxx-xxx" ] } } }, { "category": "product_name", "name": "750-881", "product": { "name": "750-881", "product_id": "CSAFPID-11007", "product_identification_helper": { "model_numbers": [ "750-881" ] } } }, { "category": "product_name", "name": "750-882", "product": { "name": "750-882", "product_id": "CSAFPID-11008", "product_identification_helper": { "model_numbers": [ "750-882" ] } } }, { "category": "product_name", "name": "750-885", "product": { "name": "750-885", "product_id": "CSAFPID-11009", "product_identification_helper": { "model_numbers": [ "750-885" ] } } }, { "category": "product_name", "name": "750-889", "product": { "name": "750-889", "product_id": "CSAFPID-11010", "product_identification_helper": { "model_numbers": [ "750-889" ] } } } ] }, { "category": "product_family", "name": "Firmware", "branches": [ { "category": "product_version_range", "name": "<=FW10", "product": { "name": "Firmware <=FW10", "product_id": "CSAFPID-21001" } }, { "category": "product_version", "name": "FW11", "product": { "name": "Firmware FW11", "product_id": "CSAFPID-22001" } } ] } ] } ], "relationships": [ { "category": "installed_on", "product_reference": "CSAFPID-21001", "relates_to_product_reference": "CSAFPID-11001", "full_product_name": { "name": "Firmware <=FW10 installed on 750-331/xxx-xxx", "product_id": "CSAFPID-31001" } }, { "category": "installed_on", "product_reference": "CSAFPID-22001", "relates_to_product_reference": "CSAFPID-11001", "full_product_name": { "name": "Firmware FW11 installed on 750-331/xxx-xxx", "product_id": "CSAFPID-32001" } }, { "category": "installed_on", "product_reference": "CSAFPID-21001", "relates_to_product_reference": "CSAFPID-11002", "full_product_name": { "name": "Firmware <=FW10 installed on 750-352", "product_id": "CSAFPID-31002" } }, { "category": "installed_on", "product_reference": "CSAFPID-22001", "relates_to_product_reference": "CSAFPID-11002", "full_product_name": { "name": "Firmware FW11 installed on 750-352", "product_id": "CSAFPID-32002" } }, { "category": "installed_on", "product_reference": "CSAFPID-21001", "relates_to_product_reference": "CSAFPID-11003", "full_product_name": { "name": "Firmware <=FW10 installed on 750-829", "product_id": "CSAFPID-31003" } }, { "category": "installed_on", "product_reference": "CSAFPID-22001", "relates_to_product_reference": "CSAFPID-11003", "full_product_name": { "name": "Firmware FW11 installed on 750-829", "product_id": "CSAFPID-32003" } }, { "category": "installed_on", "product_reference": "CSAFPID-21001", "relates_to_product_reference": "CSAFPID-11004", "full_product_name": { "name": "Firmware <=FW10 installed on 750-831/xxx-xxx", "product_id": "CSAFPID-31004" } }, { "category": "installed_on", "product_reference": "CSAFPID-22001", "relates_to_product_reference": "CSAFPID-11004", "full_product_name": { "name": "Firmware FW11 installed on 750-831/xxx-xxx", "product_id": "CSAFPID-32004" } }, { "category": "installed_on", "product_reference": "CSAFPID-21001", "relates_to_product_reference": "CSAFPID-11005", "full_product_name": { "name": "Firmware <=FW10 installed on 750-852", "product_id": "CSAFPID-31005" } }, { "category": "installed_on", "product_reference": "CSAFPID-22001", "relates_to_product_reference": "CSAFPID-11005", "full_product_name": { "name": "Firmware FW11 installed on 750-852", "product_id": "CSAFPID-32005" } }, { "category": "installed_on", "product_reference": "CSAFPID-21001", "relates_to_product_reference": "CSAFPID-11006", "full_product_name": { "name": "Firmware <=FW10 installed on 750-880/xxx-xxx", "product_id": "CSAFPID-31006" } }, { "category": "installed_on", "product_reference": "CSAFPID-22001", "relates_to_product_reference": "CSAFPID-11006", "full_product_name": { "name": "Firmware FW11 installed on 750-880/xxx-xxx", "product_id": "CSAFPID-32006" } }, { "category": "installed_on", "product_reference": "CSAFPID-21001", "relates_to_product_reference": "CSAFPID-11007", "full_product_name": { "name": "Firmware <=FW10 installed on 750-881", "product_id": "CSAFPID-31007" } }, { "category": "installed_on", "product_reference": "CSAFPID-22001", "relates_to_product_reference": "CSAFPID-11007", "full_product_name": { "name": "Firmware FW11 installed on 750-881", "product_id": "CSAFPID-32007" } }, { "category": "installed_on", "product_reference": "CSAFPID-21001", "relates_to_product_reference": "CSAFPID-11008", "full_product_name": { "name": "Firmware <=FW10 installed on 750-882", "product_id": "CSAFPID-31008" } }, { "category": "installed_on", "product_reference": "CSAFPID-22001", "relates_to_product_reference": "CSAFPID-11008", "full_product_name": { "name": "Firmware FW11 installed on 750-882", "product_id": "CSAFPID-32008" } }, { "category": "installed_on", "product_reference": "CSAFPID-21001", "relates_to_product_reference": "CSAFPID-11009", "full_product_name": { "name": "Firmware <=FW10 installed on 750-885", "product_id": "CSAFPID-31009" } }, { "category": "installed_on", "product_reference": "CSAFPID-22001", "relates_to_product_reference": "CSAFPID-11009", "full_product_name": { "name": "Firmware FW11 installed on 750-885", "product_id": "CSAFPID-32009" } }, { "category": "installed_on", "product_reference": "CSAFPID-21001", "relates_to_product_reference": "CSAFPID-11010", "full_product_name": { "name": "Firmware <=FW10 installed on 750-889", "product_id": "CSAFPID-31010" } }, { "category": "installed_on", "product_reference": "CSAFPID-22001", "relates_to_product_reference": "CSAFPID-11010", "full_product_name": { "name": "Firmware FW11 installed on 750-889", "product_id": "CSAFPID-32010" } } ], "product_groups": [ { "group_id": "CSAFGID-0001", "summary": "Affected Products", "product_ids": [ "CSAFPID-31001", "CSAFPID-31002", "CSAFPID-31003", "CSAFPID-31004", "CSAFPID-31005", "CSAFPID-31006", "CSAFPID-31007", "CSAFPID-31008", "CSAFPID-31009", "CSAFPID-31010" ] }, { "group_id": "CSAFGID-0002", "summary": "Fixed Products", "product_ids": [ "CSAFPID-32001", "CSAFPID-32002", "CSAFPID-32003", "CSAFPID-32004", "CSAFPID-32005", "CSAFPID-32006", "CSAFPID-32007", "CSAFPID-32008", "CSAFPID-32009", "CSAFPID-32010" ] } ] }, "vulnerabilities": [ { "cve": "CVE-2020-12516", "product_status": { "known_affected": [ "CSAFPID-31001", "CSAFPID-31002", "CSAFPID-31003", "CSAFPID-31004", "CSAFPID-31005", "CSAFPID-31006", "CSAFPID-31007", "CSAFPID-31008", "CSAFPID-31009", "CSAFPID-31010" ], "fixed": [ "CSAFPID-32001", "CSAFPID-32002", "CSAFPID-32003", "CSAFPID-32004", "CSAFPID-32005", "CSAFPID-32006", "CSAFPID-32007", "CSAFPID-32008", "CSAFPID-32009", "CSAFPID-32010" ] }, "scores": [ { "products": [ "CSAFPID-31001", "CSAFPID-31002", "CSAFPID-31003", "CSAFPID-31004", "CSAFPID-31005", "CSAFPID-31006", "CSAFPID-31007", "CSAFPID-31008", "CSAFPID-31009", "CSAFPID-31010" ], "cvss_v3": { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "baseScore": 7.5, "baseSeverity": "HIGH", "temporalScore": 7.5, "temporalSeverity": "HIGH", "environmentalScore": 7.5, "environmentalSeverity": "HIGH", "attackVector": "NETWORK", "attackComplexity": "LOW", "privilegesRequired": "NONE", "userInteraction": "NONE", "scope": "UNCHANGED", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "availabilityImpact": "HIGH" } } ], "remediations": [ { "category": "mitigation", "details": "* Restrict network access to the device.\n* Do not directly connect the device to the internet\n* Disable unused TCP/UDP-ports", "group_ids": [ "CSAFGID-0001" ] }, { "category": "vendor_fix", "details": "Update the device to the latest FW version available here:\n\nhttps://www.wago.com/us/requestDownload?downloadFile=FWMedia_58_750-881", "group_ids": [ "CSAFGID-0001" ] } ], "cwe": { "id": "CWE-400", "name": "Uncontrolled Resource Consumption" }, "notes": [ { "audience": "all", "title": "Vulnerability Description", "text": "Older firmware versions (FW1 up to FW10) of the WAGO PLC family 750-88x and 750-352 are vulnerable for a special denial of service attack.", "category": "description" } ], "title": "CVE-2020-12516" } ] }