CVE-2021-30187
CODESYS V2 runtime system SP before 2.4.7.55 has Improper Neutralization of Special Elements used...
CODESYS V2 runtime system SP before 2.4.7.55 has Improper Neutralization of Special Elements used in an OS Command.
Attack profile
How easy it is to exploit
- Attack vector
- Local
- Complexity
- Low
- Privileges needed
- Low
- User interaction
- None
What an attacker can affect
- Confidentiality
- Low
- Integrity
- Low
- Availability
- Low
Exploit likelihood
What each source reports
NVD Score used
CODESYS V2 runtime system SP before 2.4.7.55 has Improper Neutralization of Special Elements used in an OS Command.
- Record
CVE-2021-30187- CVSS 3.1
- 5.3 Medium
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L - CVSS 2.0
- 4.6 Medium
AV:L/AC:L/Au:N/C:P/I:P/A:P - Weakness
- CWE-78
- Updated
- 2026-11-02
CVE List No score
CODESYS V2 runtime system SP before 2.4.7.55 has Improper Neutralization of Special Elements used in an OS Command.
- Record
CVE-2021-30187- Updated
- 2026-11-02
EUVDEUVD-2021-17119 No score
CODESYS V2 runtime system SP before 2.4.7.55 has Improper Neutralization of Special Elements used in an OS Command.
- Record
EUVD-2021-17119- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-mrvh-5hf5-fwp3
CODESYS V2 runtime system SP before 2.4.7.55 has Improper Neutralization of Special Elements used...
CODESYS V2 runtime system SP before 2.4.7.55 has Improper Neutralization of Special Elements used in an OS Command.
- Record
GHSA-mrvh-5hf5-fwp3- CVSS 3.1
- 5.3 Medium
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L - Weakness
- CWE-78
- Updated
- 2026-11-02
Affected products
- codesys runtime toolkit
- wago 750-8202 firmware
- wago 750-8203 firmware
- wago 750-8204 firmware
- wago 750-8206 firmware
- wago 750-8207 firmware
- wago 750-8208 firmware
- wago 750-8210 firmware
- wago 750-8211 firmware
- wago 750-8212 firmware
- wago 750-8213 firmware
- wago 750-8214 firmware
Show 16 moreShow less
- wago 750-8216 firmware
- wago 750-8217 firmware
- wago 750-823 firmware
- wago 750-829 firmware
- wago 750-831 firmware
- wago 750-832 firmware
- wago 750-852 firmware
- wago 750-862 firmware
- wago 750-880 firmware
- wago 750-881 firmware
- wago 750-882 firmware
- wago 750-885 firmware
- wago 750-889 firmware
- wago 750-890 firmware
- wago 750-891 firmware
- wago 750-893 firmware
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2021-30187 is a medium vulnerability (CVSS 5.3) in Codesys Runtime Toolkit, published May 25, 2021. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.27%, the 19th percentile. No source names a fixed version.