Riskcovery

CVE-2018-8836

State
Published
Severity
Not scored
Published
Apr 3, 2018
Updated
Sep 17, 2024
Reserved
Mar 20, 2018

Read the record on cve.org

Description

Wago 750 Series PLCs with firmware version 10 and prior include a remote attack may take advantage of an improper implementation of the 3 way handshake during a TCP connection affecting the communications with commission and service tools. Specially crafted packets may also be sent to Port 2455/TCP/IP, used in Codesys management software, which may result in a denial-of-service condition of communications with commissioning and service tools.

Scores

The record has no CVSS score.

Weaknesses

  • CWE-404 IMPROPER RESOURCE SHUTDOWN OR RELEASE CWE-404

Affected Products

ProductVersions
WAGO 750 SeriesWAGO
  • 750-880 firmware version 10 and priorAffected
  • 750-881 firmware version 10 and priorAffected
  • 750-852 firmware version 10 and priorAffected
  • 750-882 firmware version 10 and priorAffected
  • 750-885 firmware version 10 and priorAffected
  • 750-831 firmware version 10 and priorAffected
  • 750-889 firmware version 10 and priorAffected
  • 750-829 firmware version 10 and priorAffected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.