Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1000 CNY

100.0%
Buy Us a Coffee

CVE-2015-10123— Wago: Buffer Copy without Checking Size of Input in wbm of multiple products

CVSS 8.8 · High EPSS 0.65% · P71
Get alerts for future matching vulnerabilitiesLog in to subscribe

I. Basic Information for CVE-2015-10123

Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title
Wago: Buffer Copy without Checking Size of Input in wbm of multiple products
Source: NVD (National Vulnerability Database)
Vulnerability Description
An unautheticated remote attacker could send specifically crafted packets to a affected device. If an authenticated user then views that data in a specific page of the web-based management a buffer overflow will be triggered to gain full access of the device.
Source: NVD (National Vulnerability Database)
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Source: NVD (National Vulnerability Database)
Vulnerability Type
未进行输入大小检查的缓冲区拷贝(传统缓冲区溢出)
Source: NVD (National Vulnerability Database)
Vulnerability Title
WAGO Controller BACnet 安全漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
WAGO Controller BACnet是德国万可（WAGO）公司的一系列控制器。 WAGO Controller BACnet 750-831/xxx-xxx存在安全漏洞，该漏洞源于存在缓冲区溢出漏洞。攻击者可利用该漏洞向设备发送特制的数据包触发缓冲区溢出以获得对设备的完全访问。受影响的产品和版本：Controller BACnet/IP 750-831/xxx-xxx FW13及之前版本，Controller BACnet MS/TP 750-829 FW13及之前版本， Ethernet Con
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)

Affected Products

VendorProductAffected VersionsCPESubscribe
WAGOController BACnet/IP 0 ~ FW13 -
WAGOController BACnet MS/TP 0 ~ FW13 -
WAGOEthernet Controller 3rd Generation 0 ~ FW13 -
WAGOEthernet Controller 3rd Generation 0 ~ FW13 -
WAGOFieldbus Coupler Ethernet 3rd Generation 0 ~ FW13 -

II. Public POCs for CVE-2015-10123

#POC DescriptionSource LinkShenlong Link
AI-Generated POCPremium

No public POC found.

Login to generate AI POC

III. Intelligence Information for CVE-2015-10123

请登录查看更多情报信息。

IV. Related Vulnerabilities

Same product: Controller BACnet/IP
Same vendor: WAGO
Same weakness: CWE-120

V. Comments for CVE-2015-10123

No comments yet

Leave a comment