What’s Vulnerable › Vulnerabilities

CVE-2021-34581: WAGO: Denial of Service vulnerability inside the OpenSSL implementation

• Severity: high (CVSS 7.5 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 1.0% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2021-08-31 · updated 2026-06-17
• Weakness: CWE-772

Description

Missing Release of Resource after Effective Lifetime vulnerability in OpenSSL implementation of WAGO 750-831/xxx-xxx, 750-880/xxx-xxx, 750-881, 750-889 in versions FW4 up to FW15 allows an unauthenticated attacker to cause DoS on the device.

Affected products

• WAGO 750-831/000-002 Firmware: from fw4 through fw15
• WAGO 750-831 Firmware: from fw4 through fw15
• WAGO 750-880/025-000 Firmware: from fw4 through fw15
• WAGO 750-880/025-001 Firmware: from fw4 through fw15
• WAGO 750-880/025-002 Firmware: from fw4 through fw15
• WAGO 750-880/040-000 Firmware: from fw4 through fw15
• WAGO 750-880 Firmware: from fw4 through fw15
• WAGO 750-881 Firmware: from fw4 through fw15
• WAGO 750-889 Firmware: from fw4 through fw15

References

• https://cert.vde.com/en-us/advisories/vde-2021-038
• https://cert.vde.com/en-us/advisories/vde-2021-038

Get alerted when CVE-2021-34581 or the next vulnerability affects your stack