← Vulnerability feed

Vulnerability record · CVE-2023-1150 · published 26 June 2023

CVE-2023-1150: Wago 750-363\/040-000 firmware vulnerability

Wago · 750 363\/040 000 Firmware

Uncontrolled resource consumption in Series WAGO 750-3x/-8x products may allow an unauthenticated remote attacker to DoS the MODBUS server with specially crafted packets.

7.5 CVSS 3.1 High EPSS 0.93% · top 40.1% CWE-772 · CWE-772
7.5CVSS 3.1 base score
0.93%EPSS exploitation probability, 30 days
NoNot in CISA KEV
18Affected product versions listed by NVD
2References
17 Jun 2026Last modified by NVD

Description

Uncontrolled resource consumption in Series WAGO 750-3x/-8x products may allow an unauthenticated remote attacker to DoS the MODBUS server with specially crafted packets.

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Affected products

18 vulnerable configurations from NVD's CPE data, grouped by vendor and product.

References

LinkTags
https://cert.vde.com/en/advisories/VDE-2023-005/ Third Party Advisory
https://cert.vde.com/en/advisories/VDE-2023-005/ Third Party Advisory

Track CVE-2023-1150 inside VULONE

Watch it alongside the ransomware crews, C2 infrastructure and forum chatter that reference it, query it through the API and pull it into your SIEM over TAXII.

Start free Open in platform

Related vulnerabilities

Same products first, then exploited flaws of the same weakness class.

9.1CVE-2020-12506Wago 750-362 firmware missing authentication for critical function vulnerabilityImproper Authentication vulnerability in WAGO 750-8XX series with FW version <= FW03 allows an attacker to change the settings of the devices by send…EPSS 1.5%8.1CVE-2021-34578Wago 750-890\/040-000 firmware improper authentication vulnerabilityThis vulnerability allows an attacker who has access to the WBM to read and write settings-parameters of the device by sending specifically construct…EPSS 0.96%6.1CVE-2018-16210Wago 750-362 firmware cross-site scripting vulnerabilityWAGO 750-88X and WAGO 750-89X Ethernet Controller devices, versions 01.09.18(13) and before, have XSS in the SNMP configuration via the webserv/cplcf…EPSS 0.96%5.8CVE-2024-20481Cisco ASA and FTD RAVPN resource exhaustion denial of serviceCisco ASA and FTD Remote Access VPN services can be driven into resource exhaustion by a flood of VPN authentication requests. The flaw is a resource…KEVEPSS 16%analysed

Source: NIST National Vulnerability Database (record CVE-2023-1150), CISA KEV, FIRST EPSS (scores of 2026-10-14). This page is refreshed as NVD updates the record.