CVE-2023-5188

WAGO Improper Input Validation in IEC61850 Server / Telecontrol

State: Published
Severity: 7.5 High
Published: Dec 5, 2023
Updated: Aug 2, 2024
Reserved: Sep 26, 2023

Description

The MMS Interpreter of WagoAppRTU in versions below 1.4.6.0 which is used by the WAGO Telecontrol Configurator is vulnerable to malformed packets. An remote unauthenticated attacker could send specifically crafted packets that lead to a denial-of-service condition until restart of the affected device.

Scores

CVSS	Score	Vector	Source
3.1	7.5 High	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H	CERTVDE

Weaknesses

CWE-20 Improper Input Validation

Affected Products

Product	Versions
Telecontrol ConfiguratorWAGO	*Affected
WagoAppRTUWAGO	before 1.4.6.0Affected

References

https://cert.vde.com/en/advisories/VDE-2023-044/

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.