TI-2021-10733 Aliases CVE-2021-30194 GHSA-j96m-6rcp-2p9r

CODESYS V2 Web-Server before 1.1.9.20 has an Out-of-bounds Read.

MEDIUM 41CWE-125Published 2021-05-25 · Updated 2024-08-03

Key facts

Attack vector: Network
Privileges required: None
User interaction: None
Attack complexity: Low
Impact type: —
Confidentiality · integrity · availability: High · None · High
Fix status: No fix listed

Attack profile from CVSS 3.1 · NVD. Fix status from CNA.

Summary

CODESYS V2 Web-Server before 1.1.9.20 has an Out-of-bounds Read.

Why it matters now

EPSS 0.01119 66th percentileScored 2026-11-07

Fix No fix listed No fixed version in the sources yet

SSVC decision points

Not available: CISA has not published SSVC decision points for this record.

Affected products

Vendor	Product	Affected versions	Fixed in	Status	Source
—	—	all versions	—	No fix listed	CNA

— Vendor— Affected all versions Fixed in — No fix listed CNA

CPE configurations NVD · 55

CPE	Versions	Role	Vendor
cpe:2.3:o:wago:750-893_firmware::::::::	before fw08	Vulnerable	WAGO
cpe:2.3:h:wago:750-893:-:::::::*	not specified by NVD	Running on	WAGO
cpe:2.3:o:wago:750-891_firmware::::::::	before fw08	Vulnerable	WAGO
cpe:2.3:h:wago:750-891:-:::::::*	not specified by NVD	Running on	WAGO
cpe:2.3:o:wago:750-890_firmware::::::::	before fw08	Vulnerable	WAGO
cpe:2.3:h:wago:750-890:-:::::::*	not specified by NVD	Running on	WAGO
cpe:2.3:o:wago:750-889_firmware::::::::	before fw15	Vulnerable	WAGO
cpe:2.3:h:wago:750-889:-:::::::*	not specified by NVD	Running on	WAGO
cpe:2.3:o:wago:750-885_firmware::::::::	before fw15	Vulnerable	WAGO
cpe:2.3:h:wago:750-885:-:::::::*	not specified by NVD	Running on	WAGO

cpe:2.3:o:wago:750-893_firmware:*:*:*:*:*:*:*:* Versions before fw08 Vulnerable ·WAGO
cpe:2.3:h:wago:750-893:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·WAGO
cpe:2.3:o:wago:750-891_firmware:*:*:*:*:*:*:*:* Versions before fw08 Vulnerable ·WAGO
cpe:2.3:h:wago:750-891:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·WAGO
cpe:2.3:o:wago:750-890_firmware:*:*:*:*:*:*:*:* Versions before fw08 Vulnerable ·WAGO
cpe:2.3:h:wago:750-890:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·WAGO
cpe:2.3:o:wago:750-889_firmware:*:*:*:*:*:*:*:* Versions before fw15 Vulnerable ·WAGO
cpe:2.3:h:wago:750-889:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·WAGO
cpe:2.3:o:wago:750-885_firmware:*:*:*:*:*:*:*:* Versions before fw15 Vulnerable ·WAGO
cpe:2.3:h:wago:750-885:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·WAGO

Show 45 more CPE

CPE	Versions	Role	Vendor
cpe:2.3:o:wago:750-882_firmware::::::::	before fw15	Vulnerable	WAGO
cpe:2.3:h:wago:750-882:-:::::::*	not specified by NVD	Running on	WAGO
cpe:2.3:o:wago:750-881_firmware::::::::	before fw15	Vulnerable	WAGO
cpe:2.3:h:wago:750-881:-:::::::*	not specified by NVD	Running on	WAGO
cpe:2.3:o:wago:750-880_firmware::::::::	before fw16	Vulnerable	WAGO
cpe:2.3:h:wago:750-880:-:::::::*	not specified by NVD	Running on	WAGO
cpe:2.3:o:wago:750-862_firmware::::::::	before fw08	Vulnerable	WAGO
cpe:2.3:h:wago:750-862:-:::::::*	not specified by NVD	Running on	WAGO
cpe:2.3:o:wago:750-852_firmware::::::::	before fw15	Vulnerable	WAGO
cpe:2.3:h:wago:750-852:-:::::::*	not specified by NVD	Running on	WAGO
cpe:2.3:o:wago:750-832_firmware::::::::	before fw08	Vulnerable	WAGO
cpe:2.3:h:wago:750-832:-:::::::*	not specified by NVD	Running on	WAGO
cpe:2.3:o:wago:750-831_firmware::::::::	before fw15	Vulnerable	WAGO
cpe:2.3:h:wago:750-831:-:::::::*	not specified by NVD	Running on	WAGO
cpe:2.3:o:wago:750-829_firmware::::::::	before fw15	Vulnerable	WAGO
cpe:2.3:h:wago:750-829:-:::::::*	not specified by NVD	Running on	WAGO
cpe:2.3:o:wago:750-8202_firmware::::::::	before 03.06.19_\(18\)	Vulnerable	WAGO
cpe:2.3:h:wago:750-8202:-:::::::*	not specified by NVD	Running on	WAGO
cpe:2.3:o:wago:750-8203_firmware::::::::	before 03.06.19_\(18\)	Vulnerable	WAGO
cpe:2.3:h:wago:750-8203:-:::::::*	not specified by NVD	Running on	WAGO
cpe:2.3:o:wago:750-8204_firmware::::::::	before 03.06.19_\(18\)	Vulnerable	WAGO
cpe:2.3:h:wago:750-8204:-:::::::*	not specified by NVD	Running on	WAGO
cpe:2.3:o:wago:750-8206_firmware::::::::	before 03.06.19_\(18\)	Vulnerable	WAGO
cpe:2.3:h:wago:750-8206:-:::::::*	not specified by NVD	Running on	WAGO
cpe:2.3:o:wago:750-8207_firmware::::::::	before 03.06.19_\(18\)	Vulnerable	WAGO
cpe:2.3:h:wago:750-8207:-:::::::*	not specified by NVD	Running on	WAGO
cpe:2.3:o:wago:750-8208_firmware::::::::	before 03.06.19_\(18\)	Vulnerable	WAGO
cpe:2.3:h:wago:750-8208:-:::::::*	not specified by NVD	Running on	WAGO
cpe:2.3:o:wago:750-8210_firmware::::::::	before 03.06.19_\(18\)	Vulnerable	WAGO
cpe:2.3:h:wago:750-8210:-:::::::*	not specified by NVD	Running on	WAGO
cpe:2.3:o:wago:750-8211_firmware::::::::	before 03.06.19_\(18\)	Vulnerable	WAGO
cpe:2.3:h:wago:750-8211:-:::::::*	not specified by NVD	Running on	WAGO
cpe:2.3:o:wago:750-8212_firmware::::::::	before 03.06.19_\(18\)	Vulnerable	WAGO
cpe:2.3:h:wago:750-8212:-:::::::*	not specified by NVD	Running on	WAGO
cpe:2.3:o:wago:750-8213_firmware::::::::	before 03.06.19_\(18\)	Vulnerable	WAGO
cpe:2.3:h:wago:750-8213:-:::::::*	not specified by NVD	Running on	WAGO
cpe:2.3:o:wago:750-8214_firmware::::::::	before 03.06.19_\(18\)	Vulnerable	WAGO
cpe:2.3:h:wago:750-8214:-:::::::*	not specified by NVD	Running on	WAGO
cpe:2.3:o:wago:750-8216_firmware::::::::	before 03.06.19_\(18\)	Vulnerable	WAGO
cpe:2.3:h:wago:750-8216:-:::::::*	not specified by NVD	Running on	WAGO
cpe:2.3:o:wago:750-8217_firmware::::::::	before 03.06.19_\(18\)	Vulnerable	WAGO
cpe:2.3:h:wago:750-8217:-:::::::*	not specified by NVD	Running on	WAGO
cpe:2.3:a:codesys:v2_web_server::::::::	before 1.1.9.20	Vulnerable	CODESYS
cpe:2.3:o:wago:750-823_firmware::::::::	before fw08	Vulnerable	WAGO
cpe:2.3:h:wago:750-823:-:::::::*	not specified by NVD	Running on	WAGO

cpe:2.3:o:wago:750-882_firmware:*:*:*:*:*:*:*:* Versions before fw15 Vulnerable ·WAGO
cpe:2.3:h:wago:750-882:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·WAGO
cpe:2.3:o:wago:750-881_firmware:*:*:*:*:*:*:*:* Versions before fw15 Vulnerable ·WAGO
cpe:2.3:h:wago:750-881:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·WAGO
cpe:2.3:o:wago:750-880_firmware:*:*:*:*:*:*:*:* Versions before fw16 Vulnerable ·WAGO
cpe:2.3:h:wago:750-880:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·WAGO
cpe:2.3:o:wago:750-862_firmware:*:*:*:*:*:*:*:* Versions before fw08 Vulnerable ·WAGO
cpe:2.3:h:wago:750-862:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·WAGO
cpe:2.3:o:wago:750-852_firmware:*:*:*:*:*:*:*:* Versions before fw15 Vulnerable ·WAGO
cpe:2.3:h:wago:750-852:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·WAGO
cpe:2.3:o:wago:750-832_firmware:*:*:*:*:*:*:*:* Versions before fw08 Vulnerable ·WAGO
cpe:2.3:h:wago:750-832:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·WAGO
cpe:2.3:o:wago:750-831_firmware:*:*:*:*:*:*:*:* Versions before fw15 Vulnerable ·WAGO
cpe:2.3:h:wago:750-831:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·WAGO
cpe:2.3:o:wago:750-829_firmware:*:*:*:*:*:*:*:* Versions before fw15 Vulnerable ·WAGO
cpe:2.3:h:wago:750-829:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·WAGO
cpe:2.3:o:wago:750-8202_firmware:*:*:*:*:*:*:*:* Versions before 03.06.19_\(18\) Vulnerable ·WAGO
cpe:2.3:h:wago:750-8202:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·WAGO
cpe:2.3:o:wago:750-8203_firmware:*:*:*:*:*:*:*:* Versions before 03.06.19_\(18\) Vulnerable ·WAGO
cpe:2.3:h:wago:750-8203:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·WAGO
cpe:2.3:o:wago:750-8204_firmware:*:*:*:*:*:*:*:* Versions before 03.06.19_\(18\) Vulnerable ·WAGO
cpe:2.3:h:wago:750-8204:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·WAGO
cpe:2.3:o:wago:750-8206_firmware:*:*:*:*:*:*:*:* Versions before 03.06.19_\(18\) Vulnerable ·WAGO
cpe:2.3:h:wago:750-8206:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·WAGO
cpe:2.3:o:wago:750-8207_firmware:*:*:*:*:*:*:*:* Versions before 03.06.19_\(18\) Vulnerable ·WAGO
cpe:2.3:h:wago:750-8207:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·WAGO
cpe:2.3:o:wago:750-8208_firmware:*:*:*:*:*:*:*:* Versions before 03.06.19_\(18\) Vulnerable ·WAGO
cpe:2.3:h:wago:750-8208:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·WAGO
cpe:2.3:o:wago:750-8210_firmware:*:*:*:*:*:*:*:* Versions before 03.06.19_\(18\) Vulnerable ·WAGO
cpe:2.3:h:wago:750-8210:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·WAGO
cpe:2.3:o:wago:750-8211_firmware:*:*:*:*:*:*:*:* Versions before 03.06.19_\(18\) Vulnerable ·WAGO
cpe:2.3:h:wago:750-8211:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·WAGO
cpe:2.3:o:wago:750-8212_firmware:*:*:*:*:*:*:*:* Versions before 03.06.19_\(18\) Vulnerable ·WAGO
cpe:2.3:h:wago:750-8212:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·WAGO
cpe:2.3:o:wago:750-8213_firmware:*:*:*:*:*:*:*:* Versions before 03.06.19_\(18\) Vulnerable ·WAGO
cpe:2.3:h:wago:750-8213:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·WAGO
cpe:2.3:o:wago:750-8214_firmware:*:*:*:*:*:*:*:* Versions before 03.06.19_\(18\) Vulnerable ·WAGO
cpe:2.3:h:wago:750-8214:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·WAGO
cpe:2.3:o:wago:750-8216_firmware:*:*:*:*:*:*:*:* Versions before 03.06.19_\(18\) Vulnerable ·WAGO
cpe:2.3:h:wago:750-8216:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·WAGO
cpe:2.3:o:wago:750-8217_firmware:*:*:*:*:*:*:*:* Versions before 03.06.19_\(18\) Vulnerable ·WAGO
cpe:2.3:h:wago:750-8217:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·WAGO
cpe:2.3:a:codesys:v2_web_server:*:*:*:*:*:*:*:* Versions before 1.1.9.20 Vulnerable ·CODESYS
cpe:2.3:o:wago:750-823_firmware:*:*:*:*:*:*:*:* Versions before fw08 Vulnerable ·WAGO
cpe:2.3:h:wago:750-823:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·WAGO

Remediation

No fixed version listed by the sources yet.

Timeline

2026-10-02 Threatist record created from CVE-2021-30194
2026-10-03 Alias added: GHSA-j96m-6rcp-2p9r

References

Advisory 2

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences