CVE-2021-21000
HIGHCVSS 7.5/10EPSS 1.04%
Last modified
CVE-2021-21000 is a high-severity vulnerability rated 7.5/10 on the CVSS scale. On WAGO PFC200 devices in different firmware versions with special crafted packets an attacker with network access to the device could cause a denial of service for the login service of the runtime.. EPSS estimates a 1.04% chance of exploitation in the next 30 days.
Description
On WAGO PFC200 devices in different firmware versions with special crafted packets an attacker with network access to the device could cause a denial of service for the login service of the runtime.
Metrics
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Weakness Enumeration
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Wago | 750-823 Firmware | < fw08 |
| Wago | 750-829 Firmware | < fw15 |
| Wago | 750-831 Firmware | < fw15 |
| Wago | 750-832 Firmware | < fw08 |
| Wago | 750-852 Firmware | < fw15 |
| Wago | 750-862 Firmware | < fw08 |
| Wago | 750-880 Firmware | < fw16 |
| Wago | 750-881 Firmware | < fw15 |
| Wago | 750-882 Firmware | < fw15 |
| Wago | 750-885 Firmware | < fw15 |
| Wago | 750-889 Firmware | < fw15 |
| Wago | 750-890 Firmware | < fw08 |
| Wago | 750-891 Firmware | < fw08 |
| Wago | 750-893 Firmware | < fw08 |
| Wago | 750-8202 Firmware | < 03.06.19_\(18\) |
| Wago | 750-8203 Firmware | < 03.06.19_\(18\) |
| Wago | 750-8204 Firmware | < 03.06.19_\(18\) |
| Wago | 750-8206 Firmware | < 03.06.19_\(18\) |
| Wago | 750-8207 Firmware | < 03.06.19_\(18\) |
| Wago | 750-8208 Firmware | < 03.06.19_\(18\) |
| Wago | 750-8210 Firmware | < 03.06.19_\(18\) |
| Wago | 750-8211 Firmware | < 03.06.19_\(18\) |
| Wago | 750-8212 Firmware | < 03.06.19_\(18\) |
| Wago | 750-8213 Firmware | < 03.06.19_\(18\) |
| Wago | 750-8214 Firmware | < 03.06.19_\(18\) |
| Wago | 750-8216 Firmware | < 03.06.19_\(18\) |
| Wago | 750-8217 Firmware | < 03.06.19_\(18\) |
References
- https://cert.vde.com/en-us/advisories/vde-2021-014Third Party Advisory
- https://cert.vde.com/en-us/advisories/vde-2021-014Third Party Advisory
Timeline
- Published
- Last Modified
- Status
- Analyzed
Frequently Asked Questions
What is CVE-2021-21000?
On WAGO PFC200 devices in different firmware versions with special crafted packets an attacker with network access to the device could cause a denial of service for the login service of the runtime.
How severe is CVE-2021-21000?
CVE-2021-21000 has a CVSS score of 7.5/10 (HIGH severity). The EPSS model estimates a 1.04% probability of exploitation in the next 30 days.
How do I fix CVE-2021-21000?
Check the vendor references and advisories linked above for patched versions and mitigation guidance. You can also run a Strix scan to test if your systems are affected.
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2021
- CVE-2021-20995In multiple managed switches by WAGO in different versions t…7.5
- CVE-2021-20996In multiple managed switches by WAGO in different versions s…5.3
- CVE-2021-20997In multiple managed switches by WAGO in different versions i…7.5
- CVE-2021-20998In multiple managed switches by WAGO in different versions w…9.8
- CVE-2021-20999In Weidmüller u-controls and IoT-Gateways in versions up to …9.8
- CVE-2021-2100Vulnerability in the Oracle One-to-One Fulfillment product o…9.1
- CVE-2021-21001On WAGO PFC200 devices in different firmware versions with s…6.5
- CVE-2021-21002In Phoenix Contact FL COMSERVER UNI in versions < 2.40 a inv…7.5
- CVE-2021-21003In Phoenix Contact FL SWITCH SMCS series products in multipl…5.3
- CVE-2021-21004In Phoenix Contact FL SWITCH SMCS series products in multipl…6.1
- CVE-2021-21005In Phoenix Contact FL SWITCH SMCS series products in multipl…7.5
- CVE-2021-21006Adobe Photoshop version 22.1 (and earlier) is affected by a …8.6
Are you affected by CVE-2021-21000?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST