CVE-2023-5188 WAGO Improper Input Validation in IEC61850 Server / Telecontrol
Remote unauthenticated attackers can cause denial of service in WAGO Telecontrol Configurator by sending malformed packets to the MMS Interpreter.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2023-5188?
CVE-2023-5188 is a high-severity denial of service vulnerability in WAGO Telecontrol Configurator, published on 5 Dec 2023. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
The MMS Interpreter of WagoAppRTU in versions below 1.4.6.0 which is used by the WAGO Telecontrol Configurator is vulnerable to malformed packets. An remote unauthenticated attacker could send specifically crafted packets that lead to a denial-of-service condition until restart of the affected device.
Weakness: CWE-20
Which versions are affected by CVE-2023-5188?
It affects 2 products.
Products include Wago Telecontrol Configurator, Wago Wagoapprtu.
How do I fix CVE-2023-5188?
No fix has been published for CVE-2023-5188 yet. Limit exposure of the affected software until one is available.
Upgrade, then put limits on request size, rate and nesting depth so one client cannot exhaust the service. More about Denial of service.
Is CVE-2023-5188 being exploited?
There is no known exploitation of CVE-2023-5188 in the wild and no public exploit code.
Sources
Also known as GHSA-3c9v-fv3c-v7rc.