WAGO: Series 750-3x/-8x prone to MODBUS server DoS
Priority MEDIUM 41CWE-772Published · Updated
Key facts
- Attack vector
- Network
- Privileges required
- None
- User interaction
- None
- Attack complexity
- Low
- Impact type
- Denial of service
- Confidentiality · integrity · availability
- None · None · High
- Fix status
- No fix listed
Attack profile from CVSS 3.1 · CNA. Fix status from CNA. Impact type from CWE-772.
Summary
Uncontrolled resource consumption in Series WAGO 750-3x/-8x products may allow an unauthenticated remote attacker to DoS the MODBUS server with specially crafted packets.
Why it matters now
Exploitation None reported CISA SSVC · not in CISA KEV
EPSS 0.00933 60th percentileScored 2026-11-07
Fix No fix listed No fixed version in the sources yet
SSVC decision points
CISA ADP · SSVC 2.0.3
- Exploitation
- None
- Automatable
- Yes
- Technical impact
- Partial
The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.
Affected products
| Vendor | Product | Affected versions | Fixed in | Status | Source |
|---|---|---|---|---|---|
| WAGO | 750-332 | up to FW10 | — | No fix listed | CNA |
| WAGO | 750-362/xxx-xxx | up to FW10 | — | No fix listed | CNA |
| WAGO | 750-363/xxx-xxx | up to FW10 | — | No fix listed | CNA |
| WAGO | 750-364/xxx-xxx | up to FW10 | — | No fix listed | CNA |
| WAGO | 750-365/xxx-xxx | up to FW10 | — | No fix listed | CNA |
| WAGO | 750-823 | up to FW10 | — | No fix listed | CNA |
| WAGO | 750-832/xxx-xxx | up to FW10 | — | No fix listed | CNA |
| WAGO | 750-862 | up to FW10 | — | No fix listed | CNA |
| WAGO | 750-890/xxx-xxx | up to FW10 | — | No fix listed | CNA |
| WAGO | 750-891 | up to FW10 | — | No fix listed | CNA |
| WAGO | 750-893 | up to FW10 | — | No fix listed | CNA |
- 750-332 VendorWAGO Affected up to FW10 Fixed in — No fix listed CNA
- 750-362/xxx-xxx VendorWAGO Affected up to FW10 Fixed in — No fix listed CNA
- 750-363/xxx-xxx VendorWAGO Affected up to FW10 Fixed in — No fix listed CNA
- 750-364/xxx-xxx VendorWAGO Affected up to FW10 Fixed in — No fix listed CNA
- 750-365/xxx-xxx VendorWAGO Affected up to FW10 Fixed in — No fix listed CNA
- 750-823 VendorWAGO Affected up to FW10 Fixed in — No fix listed CNA
- 750-832/xxx-xxx VendorWAGO Affected up to FW10 Fixed in — No fix listed CNA
- 750-862 VendorWAGO Affected up to FW10 Fixed in — No fix listed CNA
- 750-890/xxx-xxx VendorWAGO Affected up to FW10 Fixed in — No fix listed CNA
- 750-891 VendorWAGO Affected up to FW10 Fixed in — No fix listed CNA
- 750-893 VendorWAGO Affected up to FW10 Fixed in — No fix listed CNA
CPE configurations NVD · 36
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:o:wago:750-363\/040-000_firmware:*:*:*:*:*:*:*:* | before fw11 | Vulnerable | WAGO |
| cpe:2.3:h:wago:750-363\/040-000:-:*:*:*:*:*:*:* | not specified by NVD | Running on | WAGO |
| cpe:2.3:o:wago:750-362\/040-000_firmware:*:*:*:*:*:*:*:* | before fw11 | Vulnerable | WAGO |
| cpe:2.3:h:wago:750-362\/040-000:-:*:*:*:*:*:*:* | not specified by NVD | Running on | WAGO |
| cpe:2.3:o:wago:750-362\/000-001_firmware:*:*:*:*:*:*:*:* | before fw11 | Vulnerable | WAGO |
| cpe:2.3:h:wago:750-362\/000-001:-:*:*:*:*:*:*:* | not specified by NVD | Running on | WAGO |
| cpe:2.3:o:wago:750-891_firmware:*:*:*:*:*:*:*:* | before fw11 | Vulnerable | WAGO |
| cpe:2.3:h:wago:750-891:-:*:*:*:*:*:*:* | not specified by NVD | Running on | WAGO |
| cpe:2.3:o:wago:750-365\/040-010_firmware:*:*:*:*:*:*:*:* | before fw11 | Vulnerable | WAGO |
| cpe:2.3:h:wago:750-365\/040-010:-:*:*:*:*:*:*:* | not specified by NVD | Running on | WAGO |
- cpe:2.3:o:wago:750-363\/040-000_firmware:*:*:*:*:*:*:*:* Versions before fw11 Vulnerable ·WAGO
- cpe:2.3:h:wago:750-363\/040-000:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·WAGO
- cpe:2.3:o:wago:750-362\/040-000_firmware:*:*:*:*:*:*:*:* Versions before fw11 Vulnerable ·WAGO
- cpe:2.3:h:wago:750-362\/040-000:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·WAGO
- cpe:2.3:o:wago:750-362\/000-001_firmware:*:*:*:*:*:*:*:* Versions before fw11 Vulnerable ·WAGO
- cpe:2.3:h:wago:750-362\/000-001:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·WAGO
- cpe:2.3:o:wago:750-891_firmware:*:*:*:*:*:*:*:* Versions before fw11 Vulnerable ·WAGO
- cpe:2.3:h:wago:750-891:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·WAGO
- cpe:2.3:o:wago:750-365\/040-010_firmware:*:*:*:*:*:*:*:* Versions before fw11 Vulnerable ·WAGO
- cpe:2.3:h:wago:750-365\/040-010:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·WAGO
Show 26 more CPE
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:o:wago:750-364\/040-010_firmware:*:*:*:*:*:*:*:* | before fw11 | Vulnerable | WAGO |
| cpe:2.3:h:wago:750-364\/040-010:-:*:*:*:*:*:*:* | not specified by NVD | Running on | WAGO |
| cpe:2.3:o:wago:750-362_firmware:*:*:*:*:*:*:*:* | before fw11 | Vulnerable | WAGO |
| cpe:2.3:h:wago:750-362:-:*:*:*:*:*:*:* | not specified by NVD | Running on | WAGO |
| cpe:2.3:o:wago:750-363_firmware:*:*:*:*:*:*:*:* | before fw11 | Vulnerable | WAGO |
| cpe:2.3:h:wago:750-363:-:*:*:*:*:*:*:* | not specified by NVD | Running on | WAGO |
| cpe:2.3:o:wago:750-823_firmware:*:*:*:*:*:*:*:* | before fw11 | Vulnerable | WAGO |
| cpe:2.3:h:wago:750-823:-:*:*:*:*:*:*:* | not specified by NVD | Running on | WAGO |
| cpe:2.3:o:wago:750-832_firmware:*:*:*:*:*:*:*:* | before fw11 | Vulnerable | WAGO |
| cpe:2.3:h:wago:750-832:-:*:*:*:*:*:*:* | not specified by NVD | Running on | WAGO |
| cpe:2.3:o:wago:750-832\/000-002_firmware:*:*:*:*:*:*:*:* | before fw11 | Vulnerable | WAGO |
| cpe:2.3:h:wago:750-832\/000-002:-:*:*:*:*:*:*:* | not specified by NVD | Running on | WAGO |
| cpe:2.3:o:wago:750-862_firmware:*:*:*:*:*:*:*:* | before fw11 | Vulnerable | WAGO |
| cpe:2.3:h:wago:750-862:-:*:*:*:*:*:*:* | not specified by NVD | Running on | WAGO |
| cpe:2.3:o:wago:750-890_firmware:*:*:*:*:*:*:*:* | before fw11 | Vulnerable | WAGO |
| cpe:2.3:h:wago:750-890:-:*:*:*:*:*:*:* | not specified by NVD | Running on | WAGO |
| cpe:2.3:o:wago:750-890\/025-000_firmware:*:*:*:*:*:*:*:* | before fw11 | Vulnerable | WAGO |
| cpe:2.3:h:wago:750-890\/025-000:-:*:*:*:*:*:*:* | not specified by NVD | Running on | WAGO |
| cpe:2.3:o:wago:750-890\/025-001_firmware:*:*:*:*:*:*:*:* | before fw11 | Vulnerable | WAGO |
| cpe:2.3:h:wago:750-890\/025-001:-:*:*:*:*:*:*:* | not specified by NVD | Running on | WAGO |
| cpe:2.3:o:wago:750-890\/025-002_firmware:*:*:*:*:*:*:*:* | before fw11 | Vulnerable | WAGO |
| cpe:2.3:h:wago:750-890\/025-002:-:*:*:*:*:*:*:* | not specified by NVD | Running on | WAGO |
| cpe:2.3:o:wago:750-890\/040-000_firmware:*:*:*:*:*:*:*:* | before fw11 | Vulnerable | WAGO |
| cpe:2.3:h:wago:750-890\/040-000:-:*:*:*:*:*:*:* | not specified by NVD | Running on | WAGO |
| cpe:2.3:o:wago:750-893_firmware:*:*:*:*:*:*:*:* | before fw11 | Vulnerable | WAGO |
| cpe:2.3:h:wago:750-893:-:*:*:*:*:*:*:* | not specified by NVD | Running on | WAGO |
- cpe:2.3:o:wago:750-364\/040-010_firmware:*:*:*:*:*:*:*:* Versions before fw11 Vulnerable ·WAGO
- cpe:2.3:h:wago:750-364\/040-010:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·WAGO
- cpe:2.3:o:wago:750-362_firmware:*:*:*:*:*:*:*:* Versions before fw11 Vulnerable ·WAGO
- cpe:2.3:h:wago:750-362:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·WAGO
- cpe:2.3:o:wago:750-363_firmware:*:*:*:*:*:*:*:* Versions before fw11 Vulnerable ·WAGO
- cpe:2.3:h:wago:750-363:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·WAGO
- cpe:2.3:o:wago:750-823_firmware:*:*:*:*:*:*:*:* Versions before fw11 Vulnerable ·WAGO
- cpe:2.3:h:wago:750-823:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·WAGO
- cpe:2.3:o:wago:750-832_firmware:*:*:*:*:*:*:*:* Versions before fw11 Vulnerable ·WAGO
- cpe:2.3:h:wago:750-832:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·WAGO
- cpe:2.3:o:wago:750-832\/000-002_firmware:*:*:*:*:*:*:*:* Versions before fw11 Vulnerable ·WAGO
- cpe:2.3:h:wago:750-832\/000-002:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·WAGO
- cpe:2.3:o:wago:750-862_firmware:*:*:*:*:*:*:*:* Versions before fw11 Vulnerable ·WAGO
- cpe:2.3:h:wago:750-862:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·WAGO
- cpe:2.3:o:wago:750-890_firmware:*:*:*:*:*:*:*:* Versions before fw11 Vulnerable ·WAGO
- cpe:2.3:h:wago:750-890:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·WAGO
- cpe:2.3:o:wago:750-890\/025-000_firmware:*:*:*:*:*:*:*:* Versions before fw11 Vulnerable ·WAGO
- cpe:2.3:h:wago:750-890\/025-000:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·WAGO
- cpe:2.3:o:wago:750-890\/025-001_firmware:*:*:*:*:*:*:*:* Versions before fw11 Vulnerable ·WAGO
- cpe:2.3:h:wago:750-890\/025-001:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·WAGO
- cpe:2.3:o:wago:750-890\/025-002_firmware:*:*:*:*:*:*:*:* Versions before fw11 Vulnerable ·WAGO
- cpe:2.3:h:wago:750-890\/025-002:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·WAGO
- cpe:2.3:o:wago:750-890\/040-000_firmware:*:*:*:*:*:*:*:* Versions before fw11 Vulnerable ·WAGO
- cpe:2.3:h:wago:750-890\/040-000:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·WAGO
- cpe:2.3:o:wago:750-893_firmware:*:*:*:*:*:*:*:* Versions before fw11 Vulnerable ·WAGO
- cpe:2.3:h:wago:750-893:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·WAGO
Remediation
No fixed version listed by the sources yet.
Timeline
- 2026-10-02 Threatist record created from CVE-2023-1150
- 2026-10-03 Alias added: GHSA-phj7-pw7p-pxq8
References
Sources
- CVE-2023-1150 · CVE Program
- CVE-2023-1150 · NVD
- FIRST EPSS
- GHSA-phj7-pw7p-pxq8 · GitHub Advisory Database · CC BY 4.0
This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences