Vulnerability CVE-2021-34566


Published: 2022-11-09

Description:
In WAGO I/O-Check Service in multiple products an unauthenticated remote attacker can send a specially crafted packet containing OS commands to crash the iocheck process and write memory resulting in loss of integrity and DoS.

Type:

CWE-120

(Buffer Copy without Checking Size of Input ('Classic Buffer Overflow'))

 References:
https://cert.vde.com/en/advisories/VDE-2020-036/

Copyright 2024, cxsecurity.com

 

Back to Top