CVE-2021-30191 describes a buffer copy vulnerability without proper size checking in CODESYS V2 Web-Server versions prior to 1.1.9.20, impacting products from CODESYS and WAGO. This flaw carries a high severity CVSS score of 7.5, indicating it can be exploited remotely with low complexity, leading to a high impact on availability, though confidentiality and integrity are not directly affected. Despite its severity, there is currently no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage surrounding this vulnerability.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
< fw08CPE matchmatch criteria | cpe:2.3:o:wago:750-893_firmware:*:*:*:*:*:*:*:* | ||
< fw08CPE matchmatch criteria | cpe:2.3:o:wago:750-891_firmware:*:*:*:*:*:*:*:* | ||
< fw08CPE matchmatch criteria | cpe:2.3:o:wago:750-890_firmware:*:*:*:*:*:*:*:* | ||
< fw15CPE matchmatch criteria | cpe:2.3:o:wago:750-889_firmware:*:*:*:*:*:*:*:* | ||
< fw15CPE matchmatch criteria | cpe:2.3:o:wago:750-885_firmware:*:*:*:*:*:*:*:* |
CVSS version used by this source: 3.1
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
The average CVE in this peer group has 0.0 Twitter, 0.0 Reddit, 0.1 Bluesky, 0.1 Mastodon, and 0.4 GitHub mentions.
No media coverage found for this CVE.
The average CVE in this peer group has 0.1 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.
Vulnerabilities in CODESYS V2 runtime systems
Jul 20, 2021Vulnerabilities in CODESYS V2 runtime systems
Jul 20, 2021Vulnerabilities in CODESYS V2 runtime systems
Jul 20, 2021Vulnerabilities in CODESYS V2 runtime systems
Jul 20, 2021Vulnerabilities in CODESYS V2 runtime systems
Jul 20, 2021Vulnerabilities in CODESYS V2 runtime systems
Jul 20, 2021