CVE-2023-1150: WAGO: Series 750-3x/-8x prone to MODBUS server DoS

Severity: high (CVSS 7.5 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.9% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2023-06-26 · updated 2026-06-17
Weakness: CWE-772

Description

Uncontrolled resource consumption in Series WAGO 750-3x/-8x products may allow an unauthenticated remote attacker to DoS the MODBUS server with specially crafted packets.

Affected products

WAGO 750-362/000-001 Firmware: before fw11 — fixed in fw11
WAGO 750-362/040-000 Firmware: before fw11 — fixed in fw11
WAGO 750-362 Firmware: before fw11 — fixed in fw11
WAGO 750-363/040-000 Firmware: before fw11 — fixed in fw11
WAGO 750-363 Firmware: before fw11 — fixed in fw11
WAGO 750-364/040-010 Firmware: before fw11 — fixed in fw11
WAGO 750-365/040-010 Firmware: before fw11 — fixed in fw11
WAGO 750-823 Firmware: before fw11 — fixed in fw11
WAGO 750-832/000-002 Firmware: before fw11 — fixed in fw11
WAGO 750-832 Firmware: before fw11 — fixed in fw11
WAGO 750-862 Firmware: before fw11 — fixed in fw11
WAGO 750-890/025-000 Firmware: before fw11 — fixed in fw11
WAGO 750-890/025-001 Firmware: before fw11 — fixed in fw11
WAGO 750-890/025-002 Firmware: before fw11 — fixed in fw11
WAGO 750-890/040-000 Firmware: before fw11 — fixed in fw11
WAGO 750-890 Firmware: before fw11 — fixed in fw11
WAGO 750-891 Firmware: before fw11 — fixed in fw11
WAGO 750-893 Firmware: before fw11 — fixed in fw11

How to fix

Upgrade to a fixed version: WAGO 750-362/000-001 Firmware fw11; WAGO 750-362/040-000 Firmware fw11; WAGO 750-362 Firmware fw11; WAGO 750-363/040-000 Firmware fw11; WAGO 750-363 Firmware fw11; WAGO 750-364/040-010 Firmware fw11; WAGO 750-365/040-010 Firmware fw11; WAGO 750-823 Firmware fw11; WAGO 750-832/000-002 Firmware fw11; WAGO 750-832 Firmware fw11; WAGO 750-862 Firmware fw11; WAGO 750-890/025-000 Firmware fw11. Check the vendor advisory for mitigations.

References

Get alerted when CVE-2023-1150 or the next vulnerability affects your stack