CVE-2020-12516 — Older firmware versions (FW1 up to FW10) of the WAGO PLC family 750-88x and 750-

Older firmware versions (FW1 up to FW10) of the WAGO PLC family 750-88x and 750-352 are vulnerable for a special denial of service attack.

01What is this vulnerability?

Older firmware versions (FW1 up to FW10) of the WAGO PLC family 750-88x and 750-352 are vulnerable for a special denial of service attack.

02Affected products

Vendor	Product	Versions
WAGO	750	331/xxx-xxx — FW1<=FW10
WAGO	750	352 — FW1<=FW10
WAGO	750	829 — FW1<=FW10
WAGO	750	831/xxx-xxx — FW1<=FW10
WAGO	750	852 — FW1<=FW10
WAGO	750	880/xxx-xxx — FW1<=FW10
WAGO	750	881 — FW1<=FW10
WAGO	750	882 — FW1<=FW10
WAGO	750	885 — FW1<=FW10
WAGO	750	889 — FW1<=FW10

03Active exploitation status

Not currently listed on the CISA Known Exploited Vulnerabilities (KEV) catalog. EPSS is the best forward-looking signal — see the EPSS row above.

04Recommended remediation

• Patch to a fixed version listed in the vendor advisory (see references below).
• Mitigate with WAF rules, network egress filters, or feature flags where the patch is not yet available.
• Hunt historical logs for exploitation indicators — see Detection signatures below.

05Technical details

For the full vendor write-up, exploit chains, and reference implementations, see the references list in section 09.

06Detection signatures

Ask SARA in chat to draft a starting detection for this CVE in your stack of choice.

07Related CVEs

No directly-cited follow-up CVEs in the KB record for this advisory. The references list in section 09 carries the vendor cross-references.

08Timeline

• Published: 2020-12-10T03:04:17.186Z
• Last modified: 2024-09-16T22:14:10.360Z

09References

• us-cert.cisa.gov — https://us-cert.cisa.gov/ics/advisories/icsa-20-308-01
• cert.vde.com — https://cert.vde.com/en-us/advisories/vde-2020-042