{"id":"CVE-2023-1620","aliases":["EUVD-2023-23852","GHSA-vhfw-j3c3-cmgg"],"status":"published","title":"WAGO: DoS in multiple products in multiple versions using Codesys","description":"Multiple WAGO devices in multiple versions may allow an authenticated remote attacker with high privileges to DoS the device by sending a specifically crafted packet to the CODESYS V2 runtime.","severity":{"version":"3.1","score":4.9,"vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","level":"medium","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-10","score":0.0085,"percentile":0.58466,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-1288","CWE-20"],"published":"2023-06-26T06:19:30Z","modified":"2026-06-17T05:28:23Z","products":[{"vendor":"wago","product":"750-331"},{"vendor":"wago","product":"750-331_firmware"},{"vendor":"wago","product":"750-332"},{"vendor":"wago","product":"750-8202/xxx-xxx"},{"vendor":"wago","product":"750-8202\\/000-011_firmware"},{"vendor":"wago","product":"750-8202\\/000-012_firmware"},{"vendor":"wago","product":"750-8202\\/000-022_firmware"},{"vendor":"wago","product":"750-8202\\/025-000_firmware"},{"vendor":"wago","product":"750-8202\\/025-001_firmware"},{"vendor":"wago","product":"750-8202\\/025-002_firmware"},{"vendor":"wago","product":"750-8202\\/040-000_firmware"},{"vendor":"wago","product":"750-8202\\/040-001_firmware"},{"vendor":"wago","product":"750-8202_firmware"},{"vendor":"wago","product":"750-8203/xxx-xxx"},{"vendor":"wago","product":"750-8203\\/025-000_firmware"},{"vendor":"wago","product":"750-8203_firmware"},{"vendor":"wago","product":"750-8204/xxx-xxx"},{"vendor":"wago","product":"750-8204\\/025-000_firmware"},{"vendor":"wago","product":"750-8204_firmware"},{"vendor":"wago","product":"750-8206/xxx-xxx"},{"vendor":"wago","product":"750-8206\\/025-000_firmware"},{"vendor":"wago","product":"750-8206\\/025-001_firmware"},{"vendor":"wago","product":"750-8206\\/040-000_firmware"},{"vendor":"wago","product":"750-8206\\/040-001_firmware"},{"vendor":"wago","product":"750-8206_firmware"},{"vendor":"wago","product":"750-8207/xxx-xxx"},{"vendor":"wago","product":"750-8207\\/025-000_firmware"},{"vendor":"wago","product":"750-8207\\/025-001_firmware"},{"vendor":"wago","product":"750-8207_firmware"},{"vendor":"wago","product":"750-8208/xxx-xxx"},{"vendor":"wago","product":"750-8208\\/025-000_firmware"},{"vendor":"wago","product":"750-8208\\/025-001_firmware"},{"vendor":"wago","product":"750-8208_firmware"},{"vendor":"wago","product":"750-8210/xxx-xxx"},{"vendor":"wago","product":"750-8210\\/025-000_firmware"},{"vendor":"wago","product":"750-8210\\/040-000_firmware"},{"vendor":"wago","product":"750-8210_firmware"},{"vendor":"wago","product":"750-8211/xxx-xxx"},{"vendor":"wago","product":"750-8211\\/040-000_firmware"},{"vendor":"wago","product":"750-8211\\/040-001_firmware"},{"vendor":"wago","product":"750-8211_firmware"},{"vendor":"wago","product":"750-8212/xxx-xxx"},{"vendor":"wago","product":"750-8212\\/000-100_firmware"},{"vendor":"wago","product":"750-8212\\/025-000_firmware"},{"vendor":"wago","product":"750-8212\\/025-001_firmware"},{"vendor":"wago","product":"750-8212\\/025-002_firmware"},{"vendor":"wago","product":"750-8212\\/040-000_firmware"},{"vendor":"wago","product":"750-8212\\/040-001_firmware"},{"vendor":"wago","product":"750-8212\\/040-010_firmware"},{"vendor":"wago","product":"750-8212_firmware"},{"vendor":"wago","product":"750-8213/xxx-xxx"},{"vendor":"wago","product":"750-8213\\/040-010_firmware"},{"vendor":"wago","product":"750-8213_firmware"},{"vendor":"wago","product":"750-8214/xxx-xxx"},{"vendor":"wago","product":"750-8214_firmware"},{"vendor":"wago","product":"750-8215_firmware"},{"vendor":"wago","product":"750-8216/xxx-xxx"},{"vendor":"wago","product":"750-8216\\/025-000_firmware"},{"vendor":"wago","product":"750-8216\\/025-001_firmware"},{"vendor":"wago","product":"750-8216\\/040-000_firmware"},{"vendor":"wago","product":"750-8216_firmware"},{"vendor":"wago","product":"750-8217/xxx-xxx"},{"vendor":"wago","product":"750-8217\\/025-000_firmware"},{"vendor":"wago","product":"750-8217\\/600-000_firmware"},{"vendor":"wago","product":"750-8217\\/625-000_firmware"},{"vendor":"wago","product":"750-8217_firmware"},{"vendor":"wago","product":"750-823"},{"vendor":"wago","product":"750-823_firmware"},{"vendor":"wago","product":"750-829"},{"vendor":"wago","product":"750-829_firmware"},{"vendor":"wago","product":"750-831/xxx-xxx"},{"vendor":"wago","product":"750-831\\/000-002_firmware"},{"vendor":"wago","product":"750-831_firmware"},{"vendor":"wago","product":"750-832/xxx-xxx"},{"vendor":"wago","product":"750-832\\/000-002_firmware"},{"vendor":"wago","product":"750-832_firmware"},{"vendor":"wago","product":"750-852"},{"vendor":"wago","product":"750-852_firmware"},{"vendor":"wago","product":"750-862"},{"vendor":"wago","product":"750-862_firmware"},{"vendor":"wago","product":"750-880/xxx-xxx"},{"vendor":"wago","product":"750-880\\/025-000_firmware"},{"vendor":"wago","product":"750-880\\/025-001_firmware"},{"vendor":"wago","product":"750-880\\/025-002_firmware"},{"vendor":"wago","product":"750-880\\/040-000_firmware"},{"vendor":"wago","product":"750-880_firmware"},{"vendor":"wago","product":"750-881"},{"vendor":"wago","product":"750-881_firmware"},{"vendor":"wago","product":"750-882"},{"vendor":"wago","product":"750-882_firmware"},{"vendor":"wago","product":"750-885/xxx-xxx"},{"vendor":"wago","product":"750-885\\/025-000_firmware"},{"vendor":"wago","product":"750-885_firmware"},{"vendor":"wago","product":"750-889"},{"vendor":"wago","product":"750-889_firmware"},{"vendor":"wago","product":"750-890/xxx-xxx"},{"vendor":"wago","product":"750-890\\/025-000_firmware"},{"vendor":"wago","product":"750-890\\/025-001_firmware"},{"vendor":"wago","product":"750-890\\/025-002_firmware"},{"vendor":"wago","product":"750-890\\/040-000_firmware"},{"vendor":"wago","product":"750-890_firmware"},{"vendor":"wago","product":"750-891"},{"vendor":"wago","product":"750-891_firmware"},{"vendor":"wago","product":"750-893"},{"vendor":"wago","product":"750-893_firmware"}],"references":[{"url":"https://cert.vde.com/en/advisories/VDE-2023-006/","tags":["vendor-advisory","x_transferred","Mitigation","Third Party Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-1620"},{"url":"https://cert.vde.com/en/advisories/VDE-2023-006"},{"url":"https://github.com/advisories/GHSA-vhfw-j3c3-cmgg"}],"sources":{"cve":[{"id":"CVE-2023-1620","title":"WAGO: DoS in multiple products in multiple versions using Codesys","description":"Multiple WAGO devices in multiple versions may allow an authenticated remote attacker with high privileges to DoS the device by sending a specifically crafted packet to the CODESYS V2 runtime.","status":"published","published":"2023-06-26T06:19:30.928Z","modified":"2024-11-12T14:11:36.673Z","cvss":[{"version":"3.1","score":4.9,"vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","level":"medium","assessor":"cna"}],"cwes":["CWE-1288"],"updated_at":"2026-11-02T14:35:32.019713Z"}],"euvd":[{"id":"EUVD-2023-23852","description":"Multiple WAGO devices in multiple versions may allow an authenticated remote attacker with high privileges to DoS the device by sending a specifically crafted packet to the CODESYS V2 runtime.","status":"published","published":"2023-06-26T06:19:30Z","modified":"2024-11-12T14:11:36Z","cvss":[{"version":"3.1","score":4.9,"vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-03T00:05:04.843383Z"}],"ghsa":[{"id":"GHSA-vhfw-j3c3-cmgg","title":"Multiple WAGO devices in multiple versions may allow an authenticated remote attacker with high...","description":"Multiple WAGO devices in multiple versions may allow an authenticated remote attacker with high privileges to DoS the device by sending a specifically crafted packet to the CODESYS V2 runtime.","status":"published","published":"2023-06-26T09:30:22Z","modified":"2024-10-02T06:31:33Z","cvss":[{"version":"3.1","score":4.9,"vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","level":"medium"}],"cwes":["CWE-20","CWE-1288"],"updated_at":"2026-11-02T14:58:23.554604Z"}],"nvd":[{"id":"CVE-2023-1620","description":"Multiple WAGO devices in multiple versions may allow an authenticated remote attacker with high privileges to DoS the device by sending a specifically crafted packet to the CODESYS V2 runtime.","status":"published","published":"2023-06-26T07:15:09.197Z","modified":"2026-06-17T05:28:23.17Z","cvss":[{"version":"3.1","score":4.9,"vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","level":"medium","assessor":"secondary"},{"version":"3.1","score":4.9,"vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","level":"medium","assessor":"primary"}],"cwes":["CWE-1288"],"updated_at":"2026-11-02T14:08:12.414559Z"}]}}
