Back to overview

WAGO: Command Injection Vulnerability in I/O-Check Service of multiple products

VDE-2020-045
Last update
05/14/2025 14:53
Published at
12/17/2020 10:02
Vendor(s)
WAGO GmbH & Co. KG
External ID
VDE-2020-045
CSAF Document
Download

Summary

The reported vulnerability allows an attacker who has network access to the device to execute code with specially crafted packets.

Impact

By exploiting the described vulnerabilities the attacker potentially is able to manipulate or disrupt the device.

Affected Product(s)

Model no. Product name Affected versions
750-81xx/xxx-xxx 750-81xx/xxx-xxx Firmware WAGO GmbH & Co. KG <=FW10
750-82xx/xxx-xxx 750-82xx/xxx-xxx Firmware WAGO GmbH & Co. KG <=FW10
762-4xxx 762-4xxx Firmware WAGO GmbH & Co. KG <=FW10
762-5xxx 762-5xxx Firmware WAGO GmbH & Co. KG <=FW10
762-6xxx 762-6xxx Firmware WAGO GmbH & Co. KG <=FW10

Vulnerabilities

Expand / Collapse all

Published
09/22/2025 14:58
Severity
9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Weakness
Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') (CWE-78)
Summary

The reported vulnerability allows an attacker who has network access to the device to execute code with specially crafted packets in WAGO Series PFC 100 (750-81xx/xxx-xxx), Series PFC 200 (750-82xx/xxx-xxx), Series Wago Touch Panel 600 Standard Line (762-4xxx), Series Wago Touch Panel 600 Advanced Line (762-5xxx), Series Wago Touch Panel 600 Marine Line (762-6xxx) with firmware versions <=FW10.

References
cve.org | nvd.nist.gov

Mitigation

  • Disable I/O-Check service
  • Restrict network access to the device.
  • Do not directly connect the device to the internet.

Remediation

The I/O-Check service protocol is only needed during installation and commissioning, not during normal operations. It is highly recommended to disable the I/O-Check service after commissioning. This is the easiest and securest way to protect your device from the listed vulnerabilities.

Regardless to the action described above, the vulnerability has been fixed in FW11, released in December 2017.

Revision History

Version Date Summary
1 12/17/2020 10:02 initial revision
2 11/06/2024 12:27 Fix: added self-reference
3 05/14/2025 14:53 Fix: version space, added distribution