Lucene search

[email protected]CVE-2020-12522

HistoryDec 17, 2020 - 11:15 p.m.

CVE-2020-12522

2020-12-1723:15:13

CWE-78

[email protected]

web.nvd.nist.gov

cve-2020-12522

remote code execution

wago

pfc 100

pfc 200

touch panel 600

firmware vulnerability

network access

10 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

10 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

CHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H

9.3 High

AI Score

Confidence

High

0.004 Low

EPSS

Percentile

74.8%

JSON

The reported vulnerability allows an attacker who has network access to the device to execute code with specially crafted packets in WAGO Series PFC 100 (750-81xx/xxx-xxx), Series PFC 200 (750-82xx/xxx-xxx), Series Wago Touch Panel 600 Standard Line (762-4xxx), Series Wago Touch Panel 600 Advanced Line (762-5xxx), Series Wago Touch Panel 600 Marine Line (762-6xxx) with firmware versions <=FW10.

Affected configurations

NVD

Node

wagopfc_100_firmwareRange≤10

AND

wago750-8101\/025-000Match-

wago750-8102\/025-000Match-

Node

wagopfc_200_firmwareRange≤10

AND

wago750-8202\/000-012Match-

wago750-8202\/000-022Match-

wago750-8202\/040-000Match-

wago750-8202\/040-001Match-

wago750-8206\/025-000Match-

wago750-8206\/025-001Match-

wago750-8206\/040-000Match-

wago750-8206\/040-001Match-

wago750-8207\/025-000Match-

wago750-8207\/025-001Match-

wago750-8208\/025-000Match-

wago750-8208\/025-001Match-

wago750-8210\/025-000Match-

wago750-8210\/040-000Match-

wago750-8211\/040-000Match-

wago750-8211\/040-001Match-

wago750-8212\/025-000Match-

wago750-8212\/025-001Match-

wago750-8212\/025-002Match-

wago750-8212\/040-000Match-

wago750-8212\/040-010Match-

wago750-8213\/040-010Match-

wago750-8216\/025-000Match-

wago750-8216\/025-001Match-

wago750-8217\/025-000Match-

Node

wagotouch_panel_600_standard_firmwareRange≤10

AND

wago762-4301\/8000-002Match-

wago762-4302\/8000-002Match-

wago762-4303\/8000-002Match-

wago762-4304\/8000-002Match-

Node

wagotouch_panel_600_advanced_firmwareRange≤10

AND

wago762-5303\/8000-002Match-

wago762-5304\/8000-002Match-

Node

wagotouch_panel_600_marine_firmwareRange≤10

AND

wago762-6201\/8000-001Match-

wago762-6202\/8000-001Match-

wago762-6203\/8000-001Match-

wago762-6204\/8000-001Match-

CPENameOperatorVersion
wago:pfc_100_firmwarewago pfc 100 firmwarele10

CPE	Name	Operator	Version
wago:pfc_100_firmware	wago pfc 100 firmware	le	10

CNA Affected

[
  {
    "product": "Series PFC 100 (750-81xx/xxx-xxx)",
    "vendor": "WAGO",
    "versions": [
      {
        "lessThanOrEqual": "FW10",
        "status": "affected",
        "version": "FW1",
        "versionType": "custom"
      }
    ]
  },
  {
    "product": "Series PFC 200 (750-82xx/xxx-xxx)",
    "vendor": "WAGO",
    "versions": [
      {
        "lessThanOrEqual": "FW10",
        "status": "affected",
        "version": "FW1",
        "versionType": "custom"
      }
    ]
  },
  {
    "product": "Series Wago Touch Panel 600 Standard Line (762-4xxx)",
    "vendor": "WAGO",
    "versions": [
      {
        "lessThanOrEqual": "FW10",
        "status": "affected",
        "version": "FW1",
        "versionType": "custom"
      }
    ]
  },
  {
    "product": "Series Wago Touch Panel 600 Advanced Line (762-5xxx)",
    "vendor": "WAGO",
    "versions": [
      {
        "lessThanOrEqual": "FW10",
        "status": "affected",
        "version": "FW1",
        "versionType": "custom"
      }
    ]
  },
  {
    "product": "Series Wago Touch Panel 600 Marine Line (762-6xxx)",
    "vendor": "WAGO",
    "versions": [
      {
        "lessThanOrEqual": "FW10",
        "status": "affected",
        "version": "FW1",
        "versionType": "custom"
      }
    ]
  }
]

References

cert.vde.com/en-us/advisories/vde-2020-045

Social References

10 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

10 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

CHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H

9.3 High

AI Score

Confidence

High

0.004 Low

EPSS

Percentile

74.8%

JSON

Related for CVE-2020-12522

nessus1 nvd1 prion1 cvelist1