WAGO Improper Input Validation in IEC61850 Server / Telecontrol

CVE-2023-5188

Summary

The MMMS Interpreter in WagoAppRTU versions prior to 1.4.6.0, utilized by the WAGO Telecontrol Configurator, is susceptible to exploitation through malformed packets. This vulnerability allows a remote, unauthenticated attacker to send specially crafted packets, which could exploit the interpreter and cause the device to enter a denial-of-service state. Recovery from this condition requires a manual restart of the compromised device, potentially leading to significant operational disruption.

References