CVE-2023-1619

MediumCVSS 4.9/10Last modified Jun 17, 2026

Description

Multiple WAGO devices in multiple versions may allow an authenticated remote attacker with high privileges to DoS the device by sending a malformed packet.

Metrics

CVSS 3.1 4.9/10CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H

Weakness enumeration

CWE-1288

Affected software

Vendor	Product	Versions
Wago	750-8202/xxx-xxx	>= FW1, <= FW22 SP1
Wago	750-8203/xxx-xxx	>= FW1, <= FW22 SP1
Wago	750-8204/xxx-xxx	>= FW1, <= FW22 SP1
Wago	750-8206/xxx-xxx	>= FW1, <= FW22 SP1
Wago	750-8207/xxx-xxx	>= FW1, <= FW22 SP1
Wago	750-8208/xxx-xxx	>= FW1, <= FW22 SP1
Wago	750-8210/xxx-xxx	>= FW1, <= FW22 SP1
Wago	750-8211/xxx-xxx	>= FW1, <= FW22 SP1
Wago	750-8212/xxx-xxx	>= FW1, <= FW22 SP1
Wago	750-8213/xxx-xxx	>= FW1, <= FW22 SP1
Wago	750-8214/xxx-xxx	>= FW1, <= FW22 SP1
Wago	750-8216/xxx-xxx	>= FW1, <= FW22 SP1
Wago	750-8217/xxx-xxx	>= FW1, <= FW22 SP1
Wago	750-823	>= FW1, <= FW10
Wago	750-332	>= FW1, <= FW6
Wago	750-832/xxx-xxx	>= FW1, <= FW6
Wago	750-862	>= FW1, <= FW10
Wago	750-890/xxx-xxx	>= FW1, <= FW10
Wago	750-891	>= FW1, <= FW10
Wago	750-893	>= FW1, <= FW10
Wago	750-331	>= FW1, <= FW14
Wago	750-829	>= FW1, <= FW14
Wago	750-831/xxx-xxx	>= FW1, <= FW14
Wago	750-852	>= FW1, <= FW16
Wago	750-880/xxx-xxx	>= FW1, <= FW16
Wago	750-881	>= FW1, <= FW16
Wago	750-882	>= FW1, <= FW16
Wago	750-885/xxx-xxx	>= FW1, <= FW16
Wago	750-889	>= FW1, <= FW16

References

https://cert.vde.com/en/advisories/VDE-2023-006/Mitigation, Third Party Advisory
https://cert.vde.com/en/advisories/VDE-2023-006/Mitigation, Third Party Advisory

Timeline

Published: Jun 26, 2023
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2023

CVE-2023-16204.9Multiple WAGO devices in multiple versions may allow an authenticated remote attacker with high privileges to DoS the device by sending a sp CVE-2023-16216.5An issue has been discovered in GitLab EE affecting all versions starting from 12.0 before 15.10.5, all versions starting from 15.11 before CVE-2023-16236.5The Custom Post Type UI WordPress plugin before 1.13.5 does not properly check for CSRF when sending the debug information to a user supplie CVE-2023-16246.5The WPCode WordPress plugin before 2.0.9 has a flawed CSRF when deleting log, and does not ensure that the file to be deleted is inside the CVE-2023-16255.0An information leak was discovered in OpenStack heat. This issue could allow a remote, authenticated attacker to use the 'stack show' comman CVE-2023-16267.8A vulnerability was found in Jianming Antivirus 16.2.2022.418. It has been declared as critical. This vulnerability affects unknown code in CVE-2023-16275.5A vulnerability was found in Jianming Antivirus 16.2.2022.418. It has been rated as problematic. This issue affects some unknown processing CVE-2023-16285.5A vulnerability classified as problematic has been found in Jianming Antivirus 16.2.2022.418. Affected is an unknown function in the library CVE-2023-16297.8A vulnerability classified as critical was found in JiangMin Antivirus 16.2.2022.418. Affected by this vulnerability is the function 0x22201 CVE-2023-16305.5A vulnerability, which was classified as problematic, has been found in JiangMin Antivirus 16.2.2022.418. Affected by this issue is the func CVE-2023-16315.5A vulnerability, which was classified as problematic, was found in JiangMin Antivirus 16.2.2022.418. This affects the function 0x222010 in t CVE-2023-16335.5A credentials leak flaw was found in OpenStack Barbican. This flaw allows a local authenticated attacker to read the configuration file, gai