Read the docs
TI-2021-13599 Aliases CVE-2021-34581GHSA-v448-m2g5-fm7c

WAGO: Denial of Service vulnerability inside the OpenSSL implementation

Priority LOW 35CWE-772Published · Updated

Key facts

Attack vector
Network
Privileges required
None
User interaction
None
Attack complexity
Low
Impact type
Denial of service
Confidentiality · integrity · availability
None · None · High
Fix status
No fix listed

Attack profile from CVSS 3.1 · CNA. Fix status from CNA. Impact type from CWE-772.

Summary

Missing Release of Resource after Effective Lifetime vulnerability in OpenSSL implementation of WAGO 750-831/xxx-xxx, 750-880/xxx-xxx, 750-881, 750-889 in versions FW4 up to FW15 allows an unauthenticated attacker to cause DoS on the device.

Why it matters now

EPSS 0.01022 63rd percentileScored 2026-11-07
Fix No fix listed No fixed version in the sources yet

SSVC decision points

Not available: CISA has not published SSVC decision points for this record.

Affected products

VendorProductAffected versionsFixed inStatusSource
WAGO750-831/xxx-xxx, 750-880/xxx-xxx, 750-881, 750-889FW4 and later—No fix listedCNA
  • 750-831/xxx-xxx, 750-880/xxx-xxx, 750-881, 750-889 VendorWAGO Affected FW4 and later Fixed in — No fix listed CNA

CPE configurations NVD · 18

CPEVersionsRoleVendor
cpe:2.3:o:wago:750-880\/040-000_firmware:*:*:*:*:*:*:*:*fw4 – fw15VulnerableWAGO
cpe:2.3:h:wago:750-880\/040-000:-:*:*:*:*:*:*:*not specified by NVDRunning onWAGO
cpe:2.3:o:wago:750-880\/025-002_firmware:*:*:*:*:*:*:*:*fw4 – fw15VulnerableWAGO
cpe:2.3:h:wago:750-880\/025-002:-:*:*:*:*:*:*:*not specified by NVDRunning onWAGO
cpe:2.3:o:wago:750-880\/025-001_firmware:*:*:*:*:*:*:*:*fw4 – fw15VulnerableWAGO
cpe:2.3:h:wago:750-880\/025-001:-:*:*:*:*:*:*:*not specified by NVDRunning onWAGO
cpe:2.3:o:wago:750-880\/025-000_firmware:*:*:*:*:*:*:*:*fw4 – fw15VulnerableWAGO
cpe:2.3:h:wago:750-880\/025-000:-:*:*:*:*:*:*:*not specified by NVDRunning onWAGO
cpe:2.3:o:wago:750-831\/000-002_firmware:*:*:*:*:*:*:*:*fw4 – fw15VulnerableWAGO
cpe:2.3:h:wago:750-831\/000-002:-:*:*:*:*:*:*:*not specified by NVDRunning onWAGO
  • cpe:2.3:o:wago:750-880\/040-000_firmware:*:*:*:*:*:*:*:* Versions fw4 – fw15 Vulnerable ·WAGO
  • cpe:2.3:h:wago:750-880\/040-000:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·WAGO
  • cpe:2.3:o:wago:750-880\/025-002_firmware:*:*:*:*:*:*:*:* Versions fw4 – fw15 Vulnerable ·WAGO
  • cpe:2.3:h:wago:750-880\/025-002:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·WAGO
  • cpe:2.3:o:wago:750-880\/025-001_firmware:*:*:*:*:*:*:*:* Versions fw4 – fw15 Vulnerable ·WAGO
  • cpe:2.3:h:wago:750-880\/025-001:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·WAGO
  • cpe:2.3:o:wago:750-880\/025-000_firmware:*:*:*:*:*:*:*:* Versions fw4 – fw15 Vulnerable ·WAGO
  • cpe:2.3:h:wago:750-880\/025-000:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·WAGO
  • cpe:2.3:o:wago:750-831\/000-002_firmware:*:*:*:*:*:*:*:* Versions fw4 – fw15 Vulnerable ·WAGO
  • cpe:2.3:h:wago:750-831\/000-002:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·WAGO
Show 8 more CPE
CPEVersionsRoleVendor
cpe:2.3:o:wago:750-889_firmware:*:*:*:*:*:*:*:*fw4 – fw15VulnerableWAGO
cpe:2.3:h:wago:750-889:-:*:*:*:*:*:*:*not specified by NVDRunning onWAGO
cpe:2.3:o:wago:750-881_firmware:*:*:*:*:*:*:*:*fw4 – fw15VulnerableWAGO
cpe:2.3:h:wago:750-881:-:*:*:*:*:*:*:*not specified by NVDRunning onWAGO
cpe:2.3:o:wago:750-831_firmware:*:*:*:*:*:*:*:*fw4 – fw15VulnerableWAGO
cpe:2.3:h:wago:750-831:-:*:*:*:*:*:*:*not specified by NVDRunning onWAGO
cpe:2.3:o:wago:750-880_firmware:*:*:*:*:*:*:*:*fw4 – fw15VulnerableWAGO
cpe:2.3:h:wago:750-880:-:*:*:*:*:*:*:*not specified by NVDRunning onWAGO
  • cpe:2.3:o:wago:750-889_firmware:*:*:*:*:*:*:*:* Versions fw4 – fw15 Vulnerable ·WAGO
  • cpe:2.3:h:wago:750-889:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·WAGO
  • cpe:2.3:o:wago:750-881_firmware:*:*:*:*:*:*:*:* Versions fw4 – fw15 Vulnerable ·WAGO
  • cpe:2.3:h:wago:750-881:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·WAGO
  • cpe:2.3:o:wago:750-831_firmware:*:*:*:*:*:*:*:* Versions fw4 – fw15 Vulnerable ·WAGO
  • cpe:2.3:h:wago:750-831:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·WAGO
  • cpe:2.3:o:wago:750-880_firmware:*:*:*:*:*:*:*:* Versions fw4 – fw15 Vulnerable ·WAGO
  • cpe:2.3:h:wago:750-880:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·WAGO

Remediation

No fixed version listed by the sources yet.

Timeline

  1. 2026-10-02 Threatist record created from CVE-2021-34581
  2. 2026-10-03 Alias added: GHSA-v448-m2g5-fm7c

References

Advisory 1

  • TI-2023-01525 WAGO: DoS in multiple products in multiple versions using Codesys CVSS 3.1MEDIUM 4.9
  • TI-2023-01524 WAGO: DoS in multiple versions of multiple products CVSS 3.1MEDIUM 4.9

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences