CVE-2024-12650

Wago: Vulnerability in libwagosnmp

State
Published
Severity
5.4 Medium
Published
Mar 5, 2025
Updated
Mar 5, 2025
Reserved
Dec 16, 2024

Read the record on cve.org

Description

An attacker with low privileges can manipulate the requested memory size, causing the application to use an invalid memory area. This could lead to a crash of the application but it does not affected other applications.

Scores

CVSSScoreVectorSource
3.15.4 MediumCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:LCERTVDE

Weaknesses

Affected Products

ProductVersions
CC100 0751-9x01WAGO
  • before 04.07.01Affected
CC100 0751-9x01WAGO
  • before 04.07.01Affected
Edge Controller 0752-8303/8000-0002WAGO
  • before 04.07.01Affected
Edge Controller 0752-8303/8000-0002WAGO
  • before 04.07.01Affected
PFC100 G1 0750-810x/xxxx-xxxxWAGO
  • before 3.10.11Affected
PFC100 G1 0750-810x/xxxx-xxxxWAGO
  • before 04.07.01Affected
PFC100 G2 0750-811x-xxxx-xxxxWAGO
  • before 04.07.01Affected
PFC100 G2 0750-811x-xxxx-xxxxWAGO
  • before 04.07.01Affected
PFC200 G1 750-820x-xxx-xxxWAGO
  • before 3.10.11Affected
PFC200 G1 750-820x-xxx-xxxWAGO
  • before 04.07.01Affected
PFC200 G2 750-821x-xxx-xxxWAGO
  • before 04.07.01Affected
PFC200 G2 750-821x-xxx-xxxWAGO
  • before 04.07.01Affected
TP600 0762-420x/8000-000xWAGO
  • before 04.07.01Affected
TP600 0762-420x/8000-000xWAGO
  • before 04.07.01Affected
TP600 0762-430x/8000-000xWAGO
  • before 04.07.01Affected
TP600 0762-430x/8000-000xWAGO
  • before 04.07.01Affected
TP600 0762-520x/8000-000xWAGO
  • before 04.07.01Affected
TP600 0762-520x/8000-000xWAGO
  • before 04.07.01Affected
TP600 0762-530x/8000-000xWAGO
  • before 04.07.01Affected
TP600 0762-530x/8000-000xWAGO
  • before 04.07.01Affected
TP600 0762-620x/8000-000xWAGO
  • before 04.07.01Affected
TP600 0762-620x/8000-000xWAGO
  • before 04.07.01Affected
TP600 0762-630x/8000-000xWAGO
  • before 04.07.01Affected
TP600 0762-630x/8000-000xWAGO
  • before 04.07.01Affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.