CVE-2021-30195 HIGH

Published: 2021-05-25 | Last Modified: 2025-08-15 | Status: Analyzed

Description

CODESYS V2 runtime system before 2.4.7.55 has Improper Input Validation.

Additional Descriptions (1)

CODESYS V2 runtime system versiones anteriores a 2.4.7.55, presenta una Comprobación Inapropiada de la Entrada

CVSS Metrics

Base Score: 7.5 (HIGH)

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Attack Vector	NETWORK
Attack Complexity	LOW
Privileges Required	NONE
User Interaction	NONE
Scope	UNCHANGED
Confidentiality Impact	NONE
Integrity Impact	NONE
Availability Impact	HIGH

Source: [email protected]

Type: Primary

Exploitability Score: 3.9

Impact Score: 3.6

Base Score: 5.0 (MEDIUM)

AV:N/AC:L/Au:N/C:N/I:N/A:P

Access Vector	NETWORK
Access Complexity	LOW
Authentication	NONE
Confidentiality Impact	NONE
Integrity Impact	NONE
Availability Impact	PARTIAL

Source: [email protected]

Type: Primary

Exploitability Score: 10.0

Impact Score: 2.9

Weaknesses

Source	Type	Description
[email protected]	Primary	en CWE-125

Affected Products

Vendor	Product	Version	Update	Type
wago	750-893_firmware	*	<built-in method update of dict object at 0x7e6108406c00>	Operating System
wago	750-891_firmware	*	<built-in method update of dict object at 0x7e60a8a54200>	Operating System
wago	750-890_firmware	*	<built-in method update of dict object at 0x7e60ba9bf9c0>	Operating System
wago	750-889_firmware	*	<built-in method update of dict object at 0x7e6100e94700>	Operating System
wago	750-885_firmware	*	<built-in method update of dict object at 0x7e6108407400>	Operating System
wago	750-882_firmware	*	<built-in method update of dict object at 0x7e61084065c0>	Operating System
wago	750-881_firmware	*	<built-in method update of dict object at 0x7e60a8a54300>	Operating System
wago	750-880_firmware	*	<built-in method update of dict object at 0x7e60a8a541c0>	Operating System
wago	750-862_firmware	*	<built-in method update of dict object at 0x7e6110a569c0>	Operating System
wago	750-852_firmware	*	<built-in method update of dict object at 0x7e6108406e00>	Operating System
wago	750-832_firmware	*	<built-in method update of dict object at 0x7e6100e95680>	Operating System
wago	750-831_firmware	*	<built-in method update of dict object at 0x7e6100e96600>	Operating System
wago	750-829_firmware	*	<built-in method update of dict object at 0x7e6100e94900>	Operating System
wago	750-8202_firmware	*	<built-in method update of dict object at 0x7e6100e953c0>	Operating System
wago	750-8203_firmware	*	<built-in method update of dict object at 0x7e6100e973c0>	Operating System
wago	750-8204_firmware	*	<built-in method update of dict object at 0x7e6100e96940>	Operating System
wago	750-8206_firmware	*	<built-in method update of dict object at 0x7e6100e94e40>	Operating System
wago	750-8207_firmware	*	<built-in method update of dict object at 0x7e6100e959c0>	Operating System
wago	750-8208_firmware	*	<built-in method update of dict object at 0x7e6100e967c0>	Operating System
wago	750-8210_firmware	*	<built-in method update of dict object at 0x7e6100e97340>	Operating System
wago	750-8211_firmware	*	<built-in method update of dict object at 0x7e6100e94240>	Operating System
wago	750-8212_firmware	*	<built-in method update of dict object at 0x7e6100e96700>	Operating System
wago	750-8213_firmware	*	<built-in method update of dict object at 0x7e60eb226b80>	Operating System
wago	750-8214_firmware	*	<built-in method update of dict object at 0x7e6071ead040>	Operating System
wago	750-8216_firmware	*	<built-in method update of dict object at 0x7e6071eadac0>	Operating System
wago	750-8217_firmware	*	<built-in method update of dict object at 0x7e6071eaf580>	Operating System
codesys	plcwinnt	*	<built-in method update of dict object at 0x7e60eb227c80>	Application
codesys	runtime_toolkit	*	<built-in method update of dict object at 0x7e6071eafdc0>	Application
wago	750-823_firmware	*	<built-in method update of dict object at 0x7e6071eafb80>	Operating System

Affected Configurations

Operator: OR

Vulnerable	CPE
Yes	`cpe:2.3:o:wago:750-893_firmware::::::::`

Operator: OR

Vulnerable	CPE
No	`cpe:2.3:h:wago:750-893:-:::::::*`

Operator: OR

Vulnerable	CPE
Yes	`cpe:2.3:o:wago:750-891_firmware::::::::`

Operator: OR

Vulnerable	CPE
No	`cpe:2.3:h:wago:750-891:-:::::::*`

Operator: OR

Vulnerable	CPE
Yes	`cpe:2.3:o:wago:750-890_firmware::::::::`

Operator: OR

Vulnerable	CPE
No	`cpe:2.3:h:wago:750-890:-:::::::*`

Operator: OR

Vulnerable	CPE
Yes	`cpe:2.3:o:wago:750-889_firmware::::::::`

Operator: OR

Vulnerable	CPE
No	`cpe:2.3:h:wago:750-889:-:::::::*`

Operator: OR

Vulnerable	CPE
Yes	`cpe:2.3:o:wago:750-885_firmware::::::::`

Operator: OR

Vulnerable	CPE
No	`cpe:2.3:h:wago:750-885:-:::::::*`

Operator: OR

Vulnerable	CPE
Yes	`cpe:2.3:o:wago:750-882_firmware::::::::`

Operator: OR

Vulnerable	CPE
No	`cpe:2.3:h:wago:750-882:-:::::::*`

Operator: OR

Vulnerable	CPE
Yes	`cpe:2.3:o:wago:750-881_firmware::::::::`

Operator: OR

Vulnerable	CPE
No	`cpe:2.3:h:wago:750-881:-:::::::*`

Operator: OR

Vulnerable	CPE
Yes	`cpe:2.3:o:wago:750-880_firmware::::::::`

Operator: OR

Vulnerable	CPE
No	`cpe:2.3:h:wago:750-880:-:::::::*`

Operator: OR

Vulnerable	CPE
Yes	`cpe:2.3:o:wago:750-862_firmware::::::::`

Operator: OR

Vulnerable	CPE
No	`cpe:2.3:h:wago:750-862:-:::::::*`

Operator: OR

Vulnerable	CPE
Yes	`cpe:2.3:o:wago:750-852_firmware::::::::`

Operator: OR

Vulnerable	CPE
No	`cpe:2.3:h:wago:750-852:-:::::::*`

Operator: OR

Vulnerable	CPE
Yes	`cpe:2.3:o:wago:750-832_firmware::::::::`

Operator: OR

Vulnerable	CPE
No	`cpe:2.3:h:wago:750-832:-:::::::*`

Operator: OR

Vulnerable	CPE
Yes	`cpe:2.3:o:wago:750-831_firmware::::::::`

Operator: OR

Vulnerable	CPE
No	`cpe:2.3:h:wago:750-831:-:::::::*`

Operator: OR

Vulnerable	CPE
Yes	`cpe:2.3:o:wago:750-829_firmware::::::::`

Operator: OR

Vulnerable	CPE
No	`cpe:2.3:h:wago:750-829:-:::::::*`

Operator: OR

Vulnerable	CPE
Yes	`cpe:2.3:o:wago:750-8202_firmware::::::::`

Operator: OR

Vulnerable	CPE
No	`cpe:2.3:h:wago:750-8202:-:::::::*`

Operator: OR

Vulnerable	CPE
Yes	`cpe:2.3:o:wago:750-8203_firmware::::::::`

Operator: OR

Vulnerable	CPE
No	`cpe:2.3:h:wago:750-8203:-:::::::*`

Operator: OR

Vulnerable	CPE
Yes	`cpe:2.3:o:wago:750-8204_firmware::::::::`

Operator: OR

Vulnerable	CPE
No	`cpe:2.3:h:wago:750-8204:-:::::::*`

Operator: OR

Vulnerable	CPE
Yes	`cpe:2.3:o:wago:750-8206_firmware::::::::`

Operator: OR

Vulnerable	CPE
No	`cpe:2.3:h:wago:750-8206:-:::::::*`

Operator: OR

Vulnerable	CPE
Yes	`cpe:2.3:o:wago:750-8207_firmware::::::::`

Operator: OR

Vulnerable	CPE
No	`cpe:2.3:h:wago:750-8207:-:::::::*`

Operator: OR

Vulnerable	CPE
Yes	`cpe:2.3:o:wago:750-8208_firmware::::::::`

Operator: OR

Vulnerable	CPE
No	`cpe:2.3:h:wago:750-8208:-:::::::*`

Operator: OR

Vulnerable	CPE
Yes	`cpe:2.3:o:wago:750-8210_firmware::::::::`

Operator: OR

Vulnerable	CPE
No	`cpe:2.3:h:wago:750-8210:-:::::::*`

Operator: OR

Vulnerable	CPE
Yes	`cpe:2.3:o:wago:750-8211_firmware::::::::`

Operator: OR

Vulnerable	CPE
No	`cpe:2.3:h:wago:750-8211:-:::::::*`

Operator: OR

Vulnerable	CPE
Yes	`cpe:2.3:o:wago:750-8212_firmware::::::::`

Operator: OR

Vulnerable	CPE
No	`cpe:2.3:h:wago:750-8212:-:::::::*`

Operator: OR

Vulnerable	CPE
Yes	`cpe:2.3:o:wago:750-8213_firmware::::::::`

Operator: OR

Vulnerable	CPE
No	`cpe:2.3:h:wago:750-8213:-:::::::*`

Operator: OR

Vulnerable	CPE
Yes	`cpe:2.3:o:wago:750-8214_firmware::::::::`

Operator: OR

Vulnerable	CPE
No	`cpe:2.3:h:wago:750-8214:-:::::::*`

Operator: OR

Vulnerable	CPE
Yes	`cpe:2.3:o:wago:750-8216_firmware::::::::`

Operator: OR

Vulnerable	CPE
No	`cpe:2.3:h:wago:750-8216:-:::::::*`

Operator: OR

Vulnerable	CPE
Yes	`cpe:2.3:o:wago:750-8217_firmware::::::::`

Operator: OR

Vulnerable	CPE
No	`cpe:2.3:h:wago:750-8217:-:::::::*`

Operator: OR

Vulnerable	CPE
Yes	`cpe:2.3:a:codesys:plcwinnt::::::::`
Yes	`cpe:2.3:a:codesys:runtime_toolkit:::::::x86:*`

Operator: OR

Vulnerable	CPE
Yes	`cpe:2.3:o:wago:750-823_firmware::::::::`

Operator: OR

Vulnerable	CPE
No	`cpe:2.3:h:wago:750-823:-:::::::*`

References

https://customers.codesys.com/index.php
Source: [email protected]

Permissions Required Vendor Advisory
https://customers.codesys.com/index.php?eID=dumpFile&t=f&f=14725&token=08691519ef764b252630759eff925890176ecd78&download=
Source: [email protected]

Vendor Advisory
https://customers.codesys.com/index.php
Source: af854a3a-2127-422b-91ae-364da2661108

Permissions Required Vendor Advisory
https://customers.codesys.com/index.php?eID=dumpFile&t=f&f=14725&token=08691519ef764b252630759eff925890176ecd78&download=
Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory