CVE-2021-21001
Published May 24, 2021
Last updated 3 years ago
Overview
- Description
- On WAGO PFC200 devices in different firmware versions with special crafted packets an authorised attacker with network access to the device can access the file system with higher privileges.
- Source
- info@cert.vde.com
- NVD status
- Analyzed
Risk scores
CVSS 3.1
- Type
- Primary
- Base score
- 6.5
- Impact score
- 3.6
- Exploitability score
- 2.8
- Vector string
- CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
- Severity
- MEDIUM
CVSS 2.0
- Type
- Primary
- Base score
- 4
- Impact score
- 2.9
- Exploitability score
- 8
- Vector string
- AV:N/AC:L/Au:S/C:P/I:N/A:N
Social media
- Hype score
- Not currently trending
Configurations
[ { "nodes": [ { "negate": false, "cpeMatch": [ { "criteria": "cpe:2.3:o:wago:750-823_firmware:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "CCE00E32-0C93-47A2-9F61-7859F72ABAED", "versionEndIncluding": "fw07" } ], "operator": "OR" }, { "negate": false, "cpeMatch": [ { "criteria": "cpe:2.3:h:wago:750-823:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "CB88572A-CB05-4B52-8BFC-05EFDC819244" } ], "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "negate": false, "cpeMatch": [ { "criteria": "cpe:2.3:o:wago:750-829_firmware:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "D2D044CF-8637-4AE2-8163-938F206B8F76", "versionEndIncluding": "fw14" } ], "operator": "OR" }, { "negate": false, "cpeMatch": [ { "criteria": "cpe:2.3:h:wago:750-829:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "F88F6E08-2D1B-4B34-B8DB-40292C0BBEB2" } ], "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "negate": false, "cpeMatch": [ { "criteria": "cpe:2.3:o:wago:750-831_firmware:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "92234A0B-245B-4A5A-8346-25116F3D6290", "versionEndIncluding": "fw14" } ], "operator": "OR" }, { "negate": false, "cpeMatch": [ { "criteria": "cpe:2.3:h:wago:750-831:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "F0631884-FF6F-4AA9-9D76-CDECB5A738FC" } ], "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "negate": false, "cpeMatch": [ { "criteria": "cpe:2.3:o:wago:750-832_firmware:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "BF453C12-31A1-415B-BFAD-3354FE93C156", "versionEndIncluding": "fw06" } ], "operator": "OR" }, { "negate": false, "cpeMatch": [ { "criteria": "cpe:2.3:h:wago:750-832:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "13D1FA8D-C8BA-4D1C-8372-DECD40177631" } ], "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "negate": false, "cpeMatch": [ { "criteria": "cpe:2.3:o:wago:750-852_firmware:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "52B9F4C0-93D4-493A-8A45-F60DF4C00E72", "versionEndIncluding": "fw14" } ], "operator": "OR" }, { "negate": false, "cpeMatch": [ { "criteria": "cpe:2.3:h:wago:750-852:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "9D6739E1-EF0B-48EE-90FC-5708756FC362" } ], "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "negate": false, "cpeMatch": [ { "criteria": "cpe:2.3:o:wago:750-862_firmware:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "63A9D182-2CF5-4137-AACF-36B760B18A20", "versionEndIncluding": "fw07" } ], "operator": "OR" }, { "negate": false, "cpeMatch": [ { "criteria": "cpe:2.3:h:wago:750-862:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "FA04FBFB-9E1C-4618-9FDC-70675506D8D5" } ], "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "negate": false, "cpeMatch": [ { "criteria": "cpe:2.3:o:wago:750-880_firmware:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "84D457F2-6B9A-43B2-A443-53C131201411", "versionEndIncluding": "fw15" } ], "operator": "OR" }, { "negate": false, "cpeMatch": [ { "criteria": "cpe:2.3:h:wago:750-880:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "CFEAC4D9-15CF-44B8-844D-C012AA4637A2" } ], "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "negate": false, "cpeMatch": [ { "criteria": "cpe:2.3:o:wago:750-881_firmware:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "1370434F-903B-4328-B3B2-ACD80D50F607", "versionEndIncluding": "fw14" } ], "operator": "OR" }, { "negate": false, "cpeMatch": [ { "criteria": "cpe:2.3:h:wago:750-881:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "6FE51647-62C1-4D3C-91FA-13ACA6CD71D2" } ], "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "negate": false, "cpeMatch": [ { "criteria": "cpe:2.3:o:wago:750-882_firmware:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "5B797290-2B15-4822-9A47-098A97D02CEB", "versionEndIncluding": "fw14" } ], "operator": "OR" }, { "negate": false, "cpeMatch": [ { "criteria": "cpe:2.3:h:wago:750-882:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "B1379D65-F376-4618-B708-5E59D64C8033" } ], "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "negate": false, "cpeMatch": [ { "criteria": "cpe:2.3:o:wago:750-885_firmware:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "93B3081B-7010-4480-B298-6806AC93491C", "versionEndIncluding": "fw14" } ], "operator": "OR" }, { "negate": false, "cpeMatch": [ { "criteria": "cpe:2.3:h:wago:750-885:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "7712F56E-AEBA-4DE0-9172-26F3D29B369B" } ], "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "negate": false, "cpeMatch": [ { "criteria": "cpe:2.3:o:wago:750-889_firmware:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "D6505E3D-C983-48FF-AF17-99200EA464F4", "versionEndIncluding": "fw14" } ], "operator": "OR" }, { "negate": false, "cpeMatch": [ { "criteria": "cpe:2.3:h:wago:750-889:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "57919AAB-2962-4543-810A-C143300351F8" } ], "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "negate": false, "cpeMatch": [ { "criteria": "cpe:2.3:o:wago:750-890_firmware:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "2B30607F-D417-4EB7-B00B-3E4A00BDFDA8", "versionEndIncluding": "fw07" } ], "operator": "OR" }, { "negate": false, "cpeMatch": [ { "criteria": "cpe:2.3:h:wago:750-890:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "11751A8B-FCFD-433B-9065-B4FC85168A93" } ], "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "negate": false, "cpeMatch": [ { "criteria": "cpe:2.3:o:wago:750-891_firmware:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "6F3010D6-1319-4458-B4B1-C7470B3950F9", "versionEndIncluding": "fw07" } ], "operator": "OR" }, { "negate": false, "cpeMatch": [ { "criteria": "cpe:2.3:h:wago:750-891:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "22BAABD9-A10D-4904-AA02-C37C4490B47A" } ], "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "negate": false, "cpeMatch": [ { "criteria": "cpe:2.3:o:wago:750-893_firmware:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "5D636186-A586-4A4E-ACFC-5BCB2E4F7484", "versionEndIncluding": "fw07" } ], "operator": "OR" }, { "negate": false, "cpeMatch": [ { "criteria": "cpe:2.3:h:wago:750-893:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "4D4795D0-B90B-4643-8713-88D89172D1A5" } ], "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "negate": false, "cpeMatch": [ { "criteria": "cpe:2.3:o:wago:750-8202_firmware:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "03675DC5-0563-4742-90F1-85CCE629157E", "versionEndExcluding": "03.06.19_\\(18\\)" } ], "operator": "OR" }, { "negate": false, "cpeMatch": [ { "criteria": "cpe:2.3:h:wago:750-8202:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "23B02096-81A5-4823-94F3-D87F389397DE" } ], "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "negate": false, "cpeMatch": [ { "criteria": "cpe:2.3:o:wago:750-8203_firmware:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "E8178F4C-BD4B-4E22-95F9-5264FD29E557", "versionEndExcluding": "03.06.19_\\(18\\)" } ], "operator": "OR" }, { "negate": false, "cpeMatch": [ { "criteria": "cpe:2.3:h:wago:750-8203:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "EC428EC8-532A-4825-BCE3-C42A4BC01C68" } ], "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "negate": false, "cpeMatch": [ { "criteria": "cpe:2.3:o:wago:750-8204_firmware:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "9FC5F373-F17C-441A-AB86-F22D624E744E", "versionEndExcluding": "03.06.19_\\(18\\)" } ], "operator": "OR" }, { "negate": false, "cpeMatch": [ { "criteria": "cpe:2.3:h:wago:750-8204:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "7AF14BE1-1EB5-423B-9FE7-E401AEF92553" } ], "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "negate": false, "cpeMatch": [ { "criteria": "cpe:2.3:o:wago:750-8206_firmware:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "6C723A05-DC44-4F43-BEC2-EAD27E68804B", "versionEndExcluding": "03.06.19_\\(18\\)" } ], "operator": "OR" }, { "negate": false, "cpeMatch": [ { "criteria": "cpe:2.3:h:wago:750-8206:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "2E17ECC4-D7AE-485C-A2EF-4148817F9DB8" } ], "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "negate": false, "cpeMatch": [ { "criteria": "cpe:2.3:o:wago:750-8207_firmware:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "40789CA2-C91E-4510-A759-51C01A86C3F2", "versionEndExcluding": "03.06.19_\\(18\\)" } ], "operator": "OR" }, { "negate": false, "cpeMatch": [ { "criteria": "cpe:2.3:h:wago:750-8207:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "DA98A0D9-B050-430B-96C5-15932438FD3A" } ], "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "negate": false, "cpeMatch": [ { "criteria": "cpe:2.3:o:wago:750-8208_firmware:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "EDE72D10-8E25-4939-9255-23E8FED88449", "versionEndExcluding": "03.06.19_\\(18\\)" } ], "operator": "OR" }, { "negate": false, "cpeMatch": [ { "criteria": "cpe:2.3:h:wago:750-8208:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "C86098FC-E63E-4676-8BA1-ADCA30795558" } ], "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "negate": false, "cpeMatch": [ { "criteria": "cpe:2.3:o:wago:750-8210_firmware:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "6ED56607-5CA6-47F5-8C2A-AEF69CB4A9F7", "versionEndExcluding": "03.06.19_\\(18\\)" } ], "operator": "OR" }, { "negate": false, "cpeMatch": [ { "criteria": "cpe:2.3:h:wago:750-8210:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "1E11758B-46C3-4E57-943A-C9C073AE5211" } ], "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "negate": false, "cpeMatch": [ { "criteria": "cpe:2.3:o:wago:750-8211_firmware:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "D0E03C56-1319-4EE2-BF99-A4BA861D8381", "versionEndExcluding": "03.06.19_\\(18\\)" } ], "operator": "OR" }, { "negate": false, "cpeMatch": [ { "criteria": "cpe:2.3:h:wago:750-8211:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "5CD6B267-3E4B-4597-82A6-130D6F21C728" } ], "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "negate": false, "cpeMatch": [ { "criteria": "cpe:2.3:o:wago:750-8212_firmware:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "2343C5B1-4905-405B-ACD7-375C31FC6C9A", "versionEndExcluding": "03.06.19_\\(18\\)" } ], "operator": "OR" }, { "negate": false, "cpeMatch": [ { "criteria": "cpe:2.3:h:wago:750-8212:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "20BBC380-0F6E-4400-93AF-5B6CFEF00562" } ], "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "negate": false, "cpeMatch": [ { "criteria": "cpe:2.3:o:wago:750-8213_firmware:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "E486580C-8400-4235-A617-8DBF4F65F31D", "versionEndExcluding": "03.06.19_\\(18\\)" } ], "operator": "OR" }, { "negate": false, "cpeMatch": [ { "criteria": "cpe:2.3:h:wago:750-8213:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "4969E8EB-EF09-47B9-8F03-37BB87CFD048" } ], "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "negate": false, "cpeMatch": [ { "criteria": "cpe:2.3:o:wago:750-8214_firmware:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "3DE5D039-B7BA-4876-9B3B-B41CCA778A98", "versionEndExcluding": "03.06.19_\\(18\\)" } ], "operator": "OR" }, { "negate": false, "cpeMatch": [ { "criteria": "cpe:2.3:h:wago:750-8214:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "979A8E43-4285-4A7B-BB0B-E6888117862C" } ], "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "negate": false, "cpeMatch": [ { "criteria": "cpe:2.3:o:wago:750-8216_firmware:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "5F2AA067-9AA9-4D52-B609-C77CAD71CD33", "versionEndExcluding": "03.06.19_\\(18\\)" } ], "operator": "OR" }, { "negate": false, "cpeMatch": [ { "criteria": "cpe:2.3:h:wago:750-8216:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "3B854F74-173E-4523-BBA7-8FF7A9B9880E" } ], "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "negate": false, "cpeMatch": [ { "criteria": "cpe:2.3:o:wago:750-8217_firmware:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "A8032A39-1795-4AB0-9822-8A16EFFD1AE0", "versionEndExcluding": "03.06.19_\\(18\\)" } ], "operator": "OR" }, { "negate": false, "cpeMatch": [ { "criteria": "cpe:2.3:h:wago:750-8217:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "B23CD8FD-FC7A-4E24-BF8F-648478D82645" } ], "operator": "OR" } ], "operator": "AND" } ]