CVE-2021-21000
WAGO: PFC200 Denial of Service due to the number of connections to the runtime
On WAGO PFC200 devices in different firmware versions with special crafted packets an attacker with network access to the device could cause a denial of service for the login service of the runtime.
Attack profile
How easy it is to exploit
- Attack vector
- Network
- Complexity
- Low
- Privileges needed
- None
- User interaction
- None
What an attacker can affect
- Confidentiality
- None
- Integrity
- None
- Availability
- Low
Exploit likelihood
What each source reports
CVE List Score used
WAGO: PFC200 Denial of Service due to the number of connections to the runtime
On WAGO PFC200 devices in different firmware versions with special crafted packets an attacker with network access to the device could cause a denial of service for the login service of the runtime.
- Record
CVE-2021-21000- CVSS 3.1
- 5.3 Medium
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L - Weakness
- CWE-770
- Updated
- 2026-11-02
EUVDEUVD-2021-8409
On WAGO PFC200 devices in different firmware versions with special crafted packets an attacker with network access to the device could cause a denial of service for the login service of the runtime.
- Record
EUVD-2021-8409- CVSS 3.1
- 5.3 Medium
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L - Updated
- 2026-11-03
GitHub AdvisoriesGHSA-2ffw-fg59-p3gv
On WAGO PFC200 devices in different firmware versions with special crafted packets an attacker...
On WAGO PFC200 devices in different firmware versions with special crafted packets an attacker with network access to the device could cause a denial of service for the login service of the runtime.
- Record
GHSA-2ffw-fg59-p3gv- CVSS 3.1
- 7.5 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H - Weakness
- CWE-770
- Updated
- 2026-11-02
NVD
On WAGO PFC200 devices in different firmware versions with special crafted packets an attacker with network access to the device could cause a denial of service for the login service of the runtime.
- Record
CVE-2021-21000- CVSS 3.1
- 5.3 Medium
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L - CVSS 3.1
- 7.5 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H - CVSS 2.0
- 5.0 Medium
AV:N/AC:L/Au:N/C:N/I:N/A:P - Weakness
- CWE-770
- Updated
- 2026-11-02
Affected products
- wago 750-8202 firmware
- wago 750-8203 firmware
- wago 750-8204 firmware
- wago 750-8206 firmware
- wago 750-8207 firmware
- wago 750-8208 firmware
- wago 750-8210 firmware
- wago 750-8211 firmware
- wago 750-8212 firmware
- wago 750-8213 firmware
- wago 750-8214 firmware
- wago 750-8216 firmware
Show 17 moreShow less
- wago 750-8217 firmware
- wago 750-823 firmware
- wago 750-829 firmware
- wago 750-831 firmware
- wago 750-832 firmware
- wago 750-852 firmware
- wago 750-862 firmware
- wago 750-880 firmware
- wago 750-881 firmware
- wago 750-882 firmware
- wago 750-885 firmware
- wago 750-889 firmware
- wago 750-890 firmware
- wago 750-891 firmware
- wago 750-893 firmware
- wago series ethernet controller
- wago series pfc200 controller
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases, published | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2021-21000 is a medium vulnerability (CVSS 5.3) in Wago 750-8202 Firmware, published May 24, 2021. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 1.04%, the 64th percentile. No source names a fixed version.