CVE-2021-21000

On WAGO PFC200 devices in different firmware versions with special crafted packets an attacker with network access to the device could cause a denial of service for the login service of the runtime.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTNIST
5.3 MEDIUM
NETWORK
LOW
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
CERTVDECNA
5.3 MEDIUM
NETWORK
LOW
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
CVEADP
---
---
Base Score
CVSS 3.x
EPSS Score
Percentile: 33%
VendorProductVersion
wago750-8202_firmware
𝑥
< 03.06.19_\(18\)
wago750-8203_firmware
𝑥
< 03.06.19_\(18\)
wago750-8204_firmware
𝑥
< 03.06.19_\(18\)
wago750-8206_firmware
𝑥
< 03.06.19_\(18\)
wago750-8207_firmware
𝑥
< 03.06.19_\(18\)
wago750-8208_firmware
𝑥
< 03.06.19_\(18\)
wago750-8210_firmware
𝑥
< 03.06.19_\(18\)
wago750-8211_firmware
𝑥
< 03.06.19_\(18\)
wago750-8212_firmware
𝑥
< 03.06.19_\(18\)
wago750-8213_firmware
𝑥
< 03.06.19_\(18\)
wago750-8214_firmware
𝑥
< 03.06.19_\(18\)
wago750-8216_firmware
𝑥
< 03.06.19_\(18\)
wago750-8217_firmware
𝑥
< 03.06.19_\(18\)
𝑥
= Vulnerable software versions
Common Weakness Enumeration
References
https://cert.vde.com/en-us/advisories/vde-2021-014
https://cert.vde.com/en-us/advisories/vde-2021-014