Approved changes feed: RSS · Atom

cpe:2.3:o:wago:762-4302\/8000-002_firmware:18:patch_2:*:*:*:*:*:*

part: o version: 18 update: patch_2

VendorWago (32ab7757-de27-5378-a269-9c7ac714c35b)
Product762 4302/8000 002 Firmware (a0ffaf81-ae89-5621-b483-13aec5d5e4e6)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2021-34569 vulnerable 2026-06-03 14:44:45.585451 WAGO I/O-Check Service prone to Out-of-bounds Write
CRITICAL (9.8)
In WAGO I/O-Check Service in multiple products an attacker can send a specially crafted packet containing OS commands to crash the diagnostic tool and write memory.
Published: 2022-11-09T15:17:36.366Z
Updated: 2025-05-01T19:17:39.712Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-34568 vulnerable 2026-06-03 14:44:45.578082 WAGO I/O-Check Service prone to Allocation of Resources Without Limits or Throttling
HIGH (7.5)
In WAGO I/O-Check Service in multiple products an unauthenticated remote attacker can send a specially crafted packet containing OS commands to provoke a denial of service.
Published: 2022-11-09T15:17:29.795Z
Updated: 2025-05-01T14:20:17.218Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-34567 vulnerable 2026-06-03 14:44:45.571367 WAGO I/O-Check Service prone to Out-of-bounds Read
HIGH (8.2)
In WAGO I/O-Check Service in multiple products an unauthenticated remote attacker can send a specially crafted packet containing OS commands to provoke a denial of service and an limited out-of-bounds read.
Published: 2022-11-09T15:17:23.429Z
Updated: 2025-05-01T14:20:39.270Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-34566 vulnerable 2026-06-03 14:44:45.513779 WAGO I/O-Check Service prone to Memory Overflow
CRITICAL (9.1)
In WAGO I/O-Check Service in multiple products an unauthenticated remote attacker can send a specially crafted packet containing OS commands to crash the iocheck process and write memory resulting in loss of integrity and DoS.
Published: 2022-11-09T15:17:14.172Z
Updated: 2025-05-01T14:21:10.643Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.