CVE-2021-34578 WAGO: Authentication Vulnerability in Web-Based Management
Attackers can bypass authentication to read and modify settings on WAGO PLCs via the web-based management interface.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2021-34578?
CVE-2021-34578 is a critical authentication bypass vulnerability in WAGO PLC, published on 31 Aug 2021. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
This vulnerability allows an attacker who has access to the WBM to read and write settings-parameters of the device by sending specifically constructed requests without authentication on multiple WAGO PLCs in firmware versions up to FW07.
Weakness: CWE-287
Which versions are affected by CVE-2021-34578?
It affects 12 products.
Products include Wago 750-362 Firmware, Wago 750-363 Firmware, Wago 750-823 Firmware, Wago 750-832\/000-002 Firmware, Wago 750-832 Firmware, Wago 750-862 Firmware and 6 more.
How do I fix CVE-2021-34578?
No fix has been published for CVE-2021-34578 yet. Limit exposure of the affected software until one is available.
Upgrade, and rotate credentials and sessions that may have been exposed. More about Authentication bypass.
Is CVE-2021-34578 being exploited?
There is no known exploitation of CVE-2021-34578 in the wild and no public exploit code.
Other vulnerabilities in WAGO PLC
Sources
Also known as GHSA-m68m-r5xj-h4vj.