CVE-2018-8836 Denial of service in WAGO 750 Series
Remote attackers can cause denial of service in WAGO 750 Series PLCs by sending crafted packets to port 2455, disrupting communication with service tools.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2018-8836?
CVE-2018-8836 is a medium-severity denial of service vulnerability in WAGO 750 Series, published on 3 Apr 2018. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
Wago 750 Series PLCs with firmware version 10 and prior include a remote attack may take advantage of an improper implementation of the 3 way handshake during a TCP connection affecting the communications with commission and service tools. Specially crafted packets may also be sent to Port 2455/TCP/IP, used in Codesys management software, which may result in a denial-of-service condition of communications with commissioning and service tools.
Weakness: CWE-404
Which versions are affected by CVE-2018-8836?
It affects 8 products.
Products include Wago 750-829 Firmware, Wago 750-831 Firmware, Wago 750-852 Firmware, Wago 750-880 Firmware, Wago 750-881 Firmware, Wago 750-882 Firmware and 2 more.
How do I fix CVE-2018-8836?
No fix has been published for CVE-2018-8836 yet. Limit exposure of the affected software until one is available.
Upgrade, then put limits on request size, rate and nesting depth so one client cannot exhaust the service. More about Denial of service.
Is CVE-2018-8836 being exploited?
There is no known exploitation of CVE-2018-8836 in the wild and no public exploit code.
Sources
Also known as GHSA-pm5g-66xr-995q.