CVE-2023-1620: WAGO: DoS in multiple products in multiple versions using Codesys

Severity: medium (CVSS 4.9 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.9% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2023-06-26 · updated 2026-06-17
Weakness: CWE-1288

Description

Multiple WAGO devices in multiple versions may allow an authenticated remote attacker with high privileges to DoS the device by sending a specifically crafted packet to the CODESYS V2 runtime.

Affected products

WAGO 750-331 Firmware: before fw17 — fixed in fw17
WAGO 750-8202/000-011 Firmware: before fw22; fw22 — fixed in fw22
WAGO 750-8202/000-012 Firmware: before fw22; fw22 — fixed in fw22
WAGO 750-8202/000-022 Firmware: before fw22; fw22 — fixed in fw22
WAGO 750-8202/025-000 Firmware: before fw22; fw22 — fixed in fw22
WAGO 750-8202/025-001 Firmware: before fw22; fw22 — fixed in fw22
WAGO 750-8202/025-002 Firmware: before fw22; fw22 — fixed in fw22
WAGO 750-8202/040-000 Firmware: before fw22; fw22 — fixed in fw22
WAGO 750-8202/040-001 Firmware: before fw22; fw22 — fixed in fw22
WAGO 750-8202 Firmware: before fw22; fw22 — fixed in fw22
WAGO 750-8203/025-000 Firmware: before fw22; fw22 — fixed in fw22
WAGO 750-8203 Firmware: before fw22; fw22 — fixed in fw22
WAGO 750-8204/025-000 Firmware: before fw22; fw22 — fixed in fw22
WAGO 750-8204 Firmware: before fw22; fw22 — fixed in fw22
WAGO 750-8206/025-000 Firmware: before fw22; fw22 — fixed in fw22
WAGO 750-8206/025-001 Firmware: before fw22; fw22 — fixed in fw22
WAGO 750-8206/040-000 Firmware: before fw22; fw22 — fixed in fw22
WAGO 750-8206/040-001 Firmware: before fw22; fw22 — fixed in fw22
WAGO 750-8206 Firmware: before fw22; fw22 — fixed in fw22
WAGO 750-8207/025-000 Firmware: before fw22; fw22 — fixed in fw22
WAGO 750-8207/025-001 Firmware: before fw22; fw22 — fixed in fw22
WAGO 750-8207 Firmware: before fw22; fw22 — fixed in fw22
WAGO 750-8208/025-000 Firmware: before fw22; fw22 — fixed in fw22
WAGO 750-8208/025-001 Firmware: before fw22; fw22 — fixed in fw22
WAGO 750-8208 Firmware: before fw22; fw22 — fixed in fw22
WAGO 750-8210/025-000 Firmware: before fw22; fw22 — fixed in fw22
WAGO 750-8210/040-000 Firmware: before fw22; fw22 — fixed in fw22
WAGO 750-8210 Firmware: before fw22; fw22 — fixed in fw22
WAGO 750-8211/040-000 Firmware: before fw22; fw22 — fixed in fw22
WAGO 750-8211/040-001 Firmware: before fw22; fw22 — fixed in fw22

How to fix

Upgrade to a fixed version: WAGO 750-331 Firmware fw17; WAGO 750-8202/000-011 Firmware fw22; WAGO 750-8202/000-012 Firmware fw22; WAGO 750-8202/000-022 Firmware fw22; WAGO 750-8202/025-000 Firmware fw22; WAGO 750-8202/025-001 Firmware fw22; WAGO 750-8202/025-002 Firmware fw22; WAGO 750-8202/040-000 Firmware fw22; WAGO 750-8202/040-001 Firmware fw22; WAGO 750-8202 Firmware fw22; WAGO 750-8203/025-000 Firmware fw22; WAGO 750-8203 Firmware fw22. Check the vendor advisory for mitigations.

References

Get alerted when CVE-2023-1620 or the next vulnerability affects your stack