CVE-2020-12522
Command Injection Vulnerability in I/O-Check Service of WAGO PFC100, PFC200 and Touch Panel 600 Series with firmware versions <=FW10
Severity Score
9.8
*CVSS v3.1
Exploit Likelihood
*EPSS
Affected Versions
*CPE
Public Exploits
0
*Multiple Sources
Exploited in Wild
-
*KEV
Decision
-
*SSVC
Descriptions
The reported vulnerability allows an attacker who has network access to the device to execute code with specially crafted packets in WAGO Series PFC 100 (750-81xx/xxx-xxx), Series PFC 200 (750-82xx/xxx-xxx), Series Wago Touch Panel 600 Standard Line (762-4xxx), Series Wago Touch Panel 600 Advanced Line (762-5xxx), Series Wago Touch Panel 600 Marine Line (762-6xxx) with firmware versions <=FW10.
La vulnerabilidad reportada permite a un atacante que tiene acceso de red al dispositivo ejecutar código con paquetes especialmente diseñados en WAGO Serie PFC 100 (750-81xx/xxx-xxx), Series PFC 200 (750-82xx/xxx-xxx), Series Wago Touch Panel 600 Standard Line (762-4xxx), Series Wago Touch Panel 600 Advanced Line (762-5xxx), Series Wago Touch Panel 600 Marine Line (762-6xxx) con versiones de firmware anteriores a FW10 incluyéndola
*Credits:
This vulnerability was originally found by Florian Seidel of WAGO and was rediscovered by Uri Katz of Claroty. We thank CERT@VDE for the management of this coordinated disclosure.
CVSS Scores
Attack Vector
Attack Complexity
Privileges Required
User Interaction
Scope
Confidentiality
Integrity
Availability
Attack Vector
Attack Complexity
Privileges Required
User Interaction
Scope
Confidentiality
Integrity
Availability
Attack Vector
Attack Complexity
Authentication
Confidentiality
Integrity
Availability
* Common Vulnerability Scoring System
SSVC
- Decision:-
Exploitation
Automatable
Tech. Impact
* Organization's Worst-case Scenario
Timeline
- 2020-04-30 CVE Reserved
- 2020-12-17 CVE Published
- 2024-04-21 EPSS Updated
- 2024-09-16 CVE Updated
- ---------- Exploited in Wild
- ---------- KEV Due Date
- ---------- First Exploit
CWE
- CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CAPEC
References (1)
| URL | Tag | Source |
|---|---|---|
| https://cert.vde.com/en-us/advisories/vde-2020-045 | Third Party Advisory |
| URL | Date | SRC |
|---|
| URL | Date | SRC |
|---|
| URL | Date | SRC |
|---|
Affected Vendors, Products, and Versions
| Vendor | Product | Version | Other | Status | ||||||
|---|---|---|---|---|---|---|---|---|---|---|
| Vendor | Product | Version | Other | Status | <-- --> | Vendor | Product | Version | Other | Status |
| Wago Search vendor "Wago" | Pfc 100 Firmware Search vendor "Wago" for product "Pfc 100 Firmware" | <= 10 Search vendor "Wago" for product "Pfc 100 Firmware" and version " <= 10" | - |
Affected
| in | Wago Search vendor "Wago" | 750-8101\/025-000 Search vendor "Wago" for product "750-8101\/025-000" | - | - |
Safe
|
| Wago Search vendor "Wago" | Pfc 100 Firmware Search vendor "Wago" for product "Pfc 100 Firmware" | <= 10 Search vendor "Wago" for product "Pfc 100 Firmware" and version " <= 10" | - |
Affected
| in | Wago Search vendor "Wago" | 750-8102\/025-000 Search vendor "Wago" for product "750-8102\/025-000" | - | - |
Safe
|
| Wago Search vendor "Wago" | Pfc 200 Firmware Search vendor "Wago" for product "Pfc 200 Firmware" | <= 10 Search vendor "Wago" for product "Pfc 200 Firmware" and version " <= 10" | - |
Affected
| in | Wago Search vendor "Wago" | 750-8202\/000-012 Search vendor "Wago" for product "750-8202\/000-012" | - | - |
Safe
|
| Wago Search vendor "Wago" | Pfc 200 Firmware Search vendor "Wago" for product "Pfc 200 Firmware" | <= 10 Search vendor "Wago" for product "Pfc 200 Firmware" and version " <= 10" | - |
Affected
| in | Wago Search vendor "Wago" | 750-8202\/000-022 Search vendor "Wago" for product "750-8202\/000-022" | - | - |
Safe
|
| Wago Search vendor "Wago" | Pfc 200 Firmware Search vendor "Wago" for product "Pfc 200 Firmware" | <= 10 Search vendor "Wago" for product "Pfc 200 Firmware" and version " <= 10" | - |
Affected
| in | Wago Search vendor "Wago" | 750-8202\/040-000 Search vendor "Wago" for product "750-8202\/040-000" | - | - |
Safe
|
| Wago Search vendor "Wago" | Pfc 200 Firmware Search vendor "Wago" for product "Pfc 200 Firmware" | <= 10 Search vendor "Wago" for product "Pfc 200 Firmware" and version " <= 10" | - |
Affected
| in | Wago Search vendor "Wago" | 750-8202\/040-001 Search vendor "Wago" for product "750-8202\/040-001" | - | - |
Safe
|
| Wago Search vendor "Wago" | Pfc 200 Firmware Search vendor "Wago" for product "Pfc 200 Firmware" | <= 10 Search vendor "Wago" for product "Pfc 200 Firmware" and version " <= 10" | - |
Affected
| in | Wago Search vendor "Wago" | 750-8206\/025-000 Search vendor "Wago" for product "750-8206\/025-000" | - | - |
Safe
|
| Wago Search vendor "Wago" | Pfc 200 Firmware Search vendor "Wago" for product "Pfc 200 Firmware" | <= 10 Search vendor "Wago" for product "Pfc 200 Firmware" and version " <= 10" | - |
Affected
| in | Wago Search vendor "Wago" | 750-8206\/025-001 Search vendor "Wago" for product "750-8206\/025-001" | - | - |
Safe
|
| Wago Search vendor "Wago" | Pfc 200 Firmware Search vendor "Wago" for product "Pfc 200 Firmware" | <= 10 Search vendor "Wago" for product "Pfc 200 Firmware" and version " <= 10" | - |
Affected
| in | Wago Search vendor "Wago" | 750-8206\/040-000 Search vendor "Wago" for product "750-8206\/040-000" | - | - |
Safe
|
| Wago Search vendor "Wago" | Pfc 200 Firmware Search vendor "Wago" for product "Pfc 200 Firmware" | <= 10 Search vendor "Wago" for product "Pfc 200 Firmware" and version " <= 10" | - |
Affected
| in | Wago Search vendor "Wago" | 750-8206\/040-001 Search vendor "Wago" for product "750-8206\/040-001" | - | - |
Safe
|
| Wago Search vendor "Wago" | Pfc 200 Firmware Search vendor "Wago" for product "Pfc 200 Firmware" | <= 10 Search vendor "Wago" for product "Pfc 200 Firmware" and version " <= 10" | - |
Affected
| in | Wago Search vendor "Wago" | 750-8207\/025-000 Search vendor "Wago" for product "750-8207\/025-000" | - | - |
Safe
|
| Wago Search vendor "Wago" | Pfc 200 Firmware Search vendor "Wago" for product "Pfc 200 Firmware" | <= 10 Search vendor "Wago" for product "Pfc 200 Firmware" and version " <= 10" | - |
Affected
| in | Wago Search vendor "Wago" | 750-8207\/025-001 Search vendor "Wago" for product "750-8207\/025-001" | - | - |
Safe
|
| Wago Search vendor "Wago" | Pfc 200 Firmware Search vendor "Wago" for product "Pfc 200 Firmware" | <= 10 Search vendor "Wago" for product "Pfc 200 Firmware" and version " <= 10" | - |
Affected
| in | Wago Search vendor "Wago" | 750-8208\/025-000 Search vendor "Wago" for product "750-8208\/025-000" | - | - |
Safe
|
| Wago Search vendor "Wago" | Pfc 200 Firmware Search vendor "Wago" for product "Pfc 200 Firmware" | <= 10 Search vendor "Wago" for product "Pfc 200 Firmware" and version " <= 10" | - |
Affected
| in | Wago Search vendor "Wago" | 750-8208\/025-001 Search vendor "Wago" for product "750-8208\/025-001" | - | - |
Safe
|
| Wago Search vendor "Wago" | Pfc 200 Firmware Search vendor "Wago" for product "Pfc 200 Firmware" | <= 10 Search vendor "Wago" for product "Pfc 200 Firmware" and version " <= 10" | - |
Affected
| in | Wago Search vendor "Wago" | 750-8210\/025-000 Search vendor "Wago" for product "750-8210\/025-000" | - | - |
Safe
|
| Wago Search vendor "Wago" | Pfc 200 Firmware Search vendor "Wago" for product "Pfc 200 Firmware" | <= 10 Search vendor "Wago" for product "Pfc 200 Firmware" and version " <= 10" | - |
Affected
| in | Wago Search vendor "Wago" | 750-8210\/040-000 Search vendor "Wago" for product "750-8210\/040-000" | - | - |
Safe
|
| Wago Search vendor "Wago" | Pfc 200 Firmware Search vendor "Wago" for product "Pfc 200 Firmware" | <= 10 Search vendor "Wago" for product "Pfc 200 Firmware" and version " <= 10" | - |
Affected
| in | Wago Search vendor "Wago" | 750-8211\/040-000 Search vendor "Wago" for product "750-8211\/040-000" | - | - |
Safe
|
| Wago Search vendor "Wago" | Pfc 200 Firmware Search vendor "Wago" for product "Pfc 200 Firmware" | <= 10 Search vendor "Wago" for product "Pfc 200 Firmware" and version " <= 10" | - |
Affected
| in | Wago Search vendor "Wago" | 750-8211\/040-001 Search vendor "Wago" for product "750-8211\/040-001" | - | - |
Safe
|
| Wago Search vendor "Wago" | Pfc 200 Firmware Search vendor "Wago" for product "Pfc 200 Firmware" | <= 10 Search vendor "Wago" for product "Pfc 200 Firmware" and version " <= 10" | - |
Affected
| in | Wago Search vendor "Wago" | 750-8212\/025-000 Search vendor "Wago" for product "750-8212\/025-000" | - | - |
Safe
|
| Wago Search vendor "Wago" | Pfc 200 Firmware Search vendor "Wago" for product "Pfc 200 Firmware" | <= 10 Search vendor "Wago" for product "Pfc 200 Firmware" and version " <= 10" | - |
Affected
| in | Wago Search vendor "Wago" | 750-8212\/025-001 Search vendor "Wago" for product "750-8212\/025-001" | - | - |
Safe
|
| Wago Search vendor "Wago" | Pfc 200 Firmware Search vendor "Wago" for product "Pfc 200 Firmware" | <= 10 Search vendor "Wago" for product "Pfc 200 Firmware" and version " <= 10" | - |
Affected
| in | Wago Search vendor "Wago" | 750-8212\/025-002 Search vendor "Wago" for product "750-8212\/025-002" | - | - |
Safe
|
| Wago Search vendor "Wago" | Pfc 200 Firmware Search vendor "Wago" for product "Pfc 200 Firmware" | <= 10 Search vendor "Wago" for product "Pfc 200 Firmware" and version " <= 10" | - |
Affected
| in | Wago Search vendor "Wago" | 750-8212\/040-000 Search vendor "Wago" for product "750-8212\/040-000" | - | - |
Safe
|
| Wago Search vendor "Wago" | Pfc 200 Firmware Search vendor "Wago" for product "Pfc 200 Firmware" | <= 10 Search vendor "Wago" for product "Pfc 200 Firmware" and version " <= 10" | - |
Affected
| in | Wago Search vendor "Wago" | 750-8212\/040-010 Search vendor "Wago" for product "750-8212\/040-010" | - | - |
Safe
|
| Wago Search vendor "Wago" | Pfc 200 Firmware Search vendor "Wago" for product "Pfc 200 Firmware" | <= 10 Search vendor "Wago" for product "Pfc 200 Firmware" and version " <= 10" | - |
Affected
| in | Wago Search vendor "Wago" | 750-8213\/040-010 Search vendor "Wago" for product "750-8213\/040-010" | - | - |
Safe
|
| Wago Search vendor "Wago" | Pfc 200 Firmware Search vendor "Wago" for product "Pfc 200 Firmware" | <= 10 Search vendor "Wago" for product "Pfc 200 Firmware" and version " <= 10" | - |
Affected
| in | Wago Search vendor "Wago" | 750-8216\/025-000 Search vendor "Wago" for product "750-8216\/025-000" | - | - |
Safe
|
| Wago Search vendor "Wago" | Pfc 200 Firmware Search vendor "Wago" for product "Pfc 200 Firmware" | <= 10 Search vendor "Wago" for product "Pfc 200 Firmware" and version " <= 10" | - |
Affected
| in | Wago Search vendor "Wago" | 750-8216\/025-001 Search vendor "Wago" for product "750-8216\/025-001" | - | - |
Safe
|
| Wago Search vendor "Wago" | Pfc 200 Firmware Search vendor "Wago" for product "Pfc 200 Firmware" | <= 10 Search vendor "Wago" for product "Pfc 200 Firmware" and version " <= 10" | - |
Affected
| in | Wago Search vendor "Wago" | 750-8217\/025-000 Search vendor "Wago" for product "750-8217\/025-000" | - | - |
Safe
|
| Wago Search vendor "Wago" | Touch Panel 600 Standard Firmware Search vendor "Wago" for product "Touch Panel 600 Standard Firmware" | <= 10 Search vendor "Wago" for product "Touch Panel 600 Standard Firmware" and version " <= 10" | - |
Affected
| in | Wago Search vendor "Wago" | 762-4301\/8000-002 Search vendor "Wago" for product "762-4301\/8000-002" | - | - |
Safe
|
| Wago Search vendor "Wago" | Touch Panel 600 Standard Firmware Search vendor "Wago" for product "Touch Panel 600 Standard Firmware" | <= 10 Search vendor "Wago" for product "Touch Panel 600 Standard Firmware" and version " <= 10" | - |
Affected
| in | Wago Search vendor "Wago" | 762-4302\/8000-002 Search vendor "Wago" for product "762-4302\/8000-002" | - | - |
Safe
|
| Wago Search vendor "Wago" | Touch Panel 600 Standard Firmware Search vendor "Wago" for product "Touch Panel 600 Standard Firmware" | <= 10 Search vendor "Wago" for product "Touch Panel 600 Standard Firmware" and version " <= 10" | - |
Affected
| in | Wago Search vendor "Wago" | 762-4303\/8000-002 Search vendor "Wago" for product "762-4303\/8000-002" | - | - |
Safe
|
| Wago Search vendor "Wago" | Touch Panel 600 Standard Firmware Search vendor "Wago" for product "Touch Panel 600 Standard Firmware" | <= 10 Search vendor "Wago" for product "Touch Panel 600 Standard Firmware" and version " <= 10" | - |
Affected
| in | Wago Search vendor "Wago" | 762-4304\/8000-002 Search vendor "Wago" for product "762-4304\/8000-002" | - | - |
Safe
|
| Wago Search vendor "Wago" | Touch Panel 600 Advanced Firmware Search vendor "Wago" for product "Touch Panel 600 Advanced Firmware" | <= 10 Search vendor "Wago" for product "Touch Panel 600 Advanced Firmware" and version " <= 10" | - |
Affected
| in | Wago Search vendor "Wago" | 762-5303\/8000-002 Search vendor "Wago" for product "762-5303\/8000-002" | - | - |
Safe
|
| Wago Search vendor "Wago" | Touch Panel 600 Advanced Firmware Search vendor "Wago" for product "Touch Panel 600 Advanced Firmware" | <= 10 Search vendor "Wago" for product "Touch Panel 600 Advanced Firmware" and version " <= 10" | - |
Affected
| in | Wago Search vendor "Wago" | 762-5304\/8000-002 Search vendor "Wago" for product "762-5304\/8000-002" | - | - |
Safe
|
| Wago Search vendor "Wago" | Touch Panel 600 Marine Firmware Search vendor "Wago" for product "Touch Panel 600 Marine Firmware" | <= 10 Search vendor "Wago" for product "Touch Panel 600 Marine Firmware" and version " <= 10" | - |
Affected
| in | Wago Search vendor "Wago" | 762-6201\/8000-001 Search vendor "Wago" for product "762-6201\/8000-001" | - | - |
Safe
|
| Wago Search vendor "Wago" | Touch Panel 600 Marine Firmware Search vendor "Wago" for product "Touch Panel 600 Marine Firmware" | <= 10 Search vendor "Wago" for product "Touch Panel 600 Marine Firmware" and version " <= 10" | - |
Affected
| in | Wago Search vendor "Wago" | 762-6202\/8000-001 Search vendor "Wago" for product "762-6202\/8000-001" | - | - |
Safe
|
| Wago Search vendor "Wago" | Touch Panel 600 Marine Firmware Search vendor "Wago" for product "Touch Panel 600 Marine Firmware" | <= 10 Search vendor "Wago" for product "Touch Panel 600 Marine Firmware" and version " <= 10" | - |
Affected
| in | Wago Search vendor "Wago" | 762-6203\/8000-001 Search vendor "Wago" for product "762-6203\/8000-001" | - | - |
Safe
|
| Wago Search vendor "Wago" | Touch Panel 600 Marine Firmware Search vendor "Wago" for product "Touch Panel 600 Marine Firmware" | <= 10 Search vendor "Wago" for product "Touch Panel 600 Marine Firmware" and version " <= 10" | - |
Affected
| in | Wago Search vendor "Wago" | 762-6204\/8000-001 Search vendor "Wago" for product "762-6204\/8000-001" | - | - |
Safe
|