CVE-2021-30187
MEDIUMCVSS 5.3/10EPSS 0.27%
Last modified
CVE-2021-30187 is a medium-severity vulnerability rated 5.3/10 on the CVSS scale. CODESYS V2 runtime system SP before 2.4.7.55 has Improper Neutralization of Special Elements used in an OS Command.. EPSS estimates a 0.27% chance of exploitation in the next 30 days.
Description
CODESYS V2 runtime system SP before 2.4.7.55 has Improper Neutralization of Special Elements used in an OS Command.
Metrics
Weakness Enumeration
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Wago | 750-893 Firmware | < fw08 |
| Wago | 750-891 Firmware | < fw08 |
| Wago | 750-890 Firmware | < fw08 |
| Wago | 750-889 Firmware | < fw15 |
| Wago | 750-885 Firmware | < fw15 |
| Wago | 750-882 Firmware | < fw15 |
| Wago | 750-881 Firmware | < fw15 |
| Wago | 750-880 Firmware | < fw16 |
| Wago | 750-862 Firmware | < fw08 |
| Wago | 750-852 Firmware | < fw15 |
| Wago | 750-832 Firmware | < fw08 |
| Wago | 750-831 Firmware | < fw15 |
| Wago | 750-829 Firmware | < fw15 |
| Wago | 750-8202 Firmware | < 03.06.19_\(18\) |
| Wago | 750-8203 Firmware | < 03.06.19_\(18\) |
| Wago | 750-8204 Firmware | < 03.06.19_\(18\) |
| Wago | 750-8206 Firmware | < 03.06.19_\(18\) |
| Wago | 750-8207 Firmware | < 03.06.19_\(18\) |
| Wago | 750-8208 Firmware | < 03.06.19_\(18\) |
| Wago | 750-8210 Firmware | < 03.06.19_\(18\) |
| Wago | 750-8211 Firmware | < 03.06.19_\(18\) |
| Wago | 750-8212 Firmware | < 03.06.19_\(18\) |
| Wago | 750-8213 Firmware | < 03.06.19_\(18\) |
| Wago | 750-8214 Firmware | < 03.06.19_\(18\) |
| Wago | 750-8216 Firmware | < 03.06.19_\(18\) |
| Wago | 750-8217 Firmware | < 03.06.19_\(18\) |
| Codesys | Runtime Toolkit | < 2.4.7.55 |
| Wago | 750-823 Firmware | < fw08 |
References
- https://customers.codesys.com/index.phpPermissions Required, Vendor Advisory
- https://customers.codesys.com/index.phpPermissions Required, Vendor Advisory
Timeline
- Published
- Last Modified
- Status
- Analyzed
Frequently Asked Questions
What is CVE-2021-30187?
CODESYS V2 runtime system SP before 2.4.7.55 has Improper Neutralization of Special Elements used in an OS Command.
How severe is CVE-2021-30187?
CVE-2021-30187 has a CVSS score of 5.3/10 (MEDIUM severity). The EPSS model estimates a 0.27% probability of exploitation in the next 30 days.
How do I fix CVE-2021-30187?
Check the vendor references and advisories linked above for patched versions and mitigation guidance. You can also run a Strix scan to test if your systems are affected.
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2021
- CVE-2021-30180Apache Dubbo prior to 2.7.9 support Tag routing which will e…9.8
- CVE-2021-30181Apache Dubbo prior to 2.6.9 and 2.7.9 supports Script routin…9.8
- CVE-2021-30183Cleartext storage of sensitive information in multiple versi…7.5
- CVE-2021-30184GNU Chess 6.2.7 allows attackers to execute arbitrary code v…7.8
- CVE-2021-30185CERN Indico before 2.3.4 can use an attacker-supplied Host h…7.5
- CVE-2021-30186CODESYS V2 runtime system SP before 2.4.7.55 has a Heap-base…7.5
- CVE-2021-30188CODESYS V2 runtime system SP before 2.4.7.55 has a Stack-bas…9.8
- CVE-2021-30189CODESYS V2 Web-Server before 1.1.9.20 has a Stack-based Buff…9.8
- CVE-2021-3019ffay lanproxy 0.1 allows Directory Traversal to read /../con…7.5
- CVE-2021-30190CODESYS V2 Web-Server before 1.1.9.20 has Improper Access Co…9.8
- CVE-2021-30191CODESYS V2 Web-Server before 1.1.9.20 has a a Buffer Copy wi…7.5
- CVE-2021-30192CODESYS V2 Web-Server before 1.1.9.20 has an Improperly Impl…9.8
Are you affected by CVE-2021-30187?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST