CVE-2023-5188 json
WAGO Improper Input Validation in IEC61850 Server / Telecontrol
published 2023-12-05 2 y ago modified 2026-06-17 4 mo ago also EUVD-2023-57525
- cvss
- 7.5
- version 3.1, CNA
- cisa kev
- Not listed
- not in CISA's catalog
- epss
- 1.0%
- EPSS 1.0% chance of exploitation in 30 days, percentile 64%
- public exploits
- 0
- none known
Summary
The MMS Interpreter of WagoAppRTU in versions below 1.4.6.0 which is used by the WAGO Telecontrol Configurator is vulnerable to malformed packets. An remote unauthenticated attacker could send specifically crafted packets that lead to a denial-of-service condition until restart of the affected device.
Patch / fix
- WAGO WagoAppRTU 1.4.6.0
Exploit prediction
1.04% chance of exploitation in the next 30 days, higher than 64% of all scored CVEs (FIRST EPSS, 2026-11-08).
CVSS scores
| assigned by | version | score | vector |
|---|---|---|---|
| CNA | 3.1 | 7.5 | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H |
Affected products
- WAGO Telecontrol Configurator
- WAGO WagoAppRTU
Classification
- Weakness
-
- CWE-20 Improper Input Validation
References
-
cert.vde.com
/en/advisories/VDE-2023-044/
third-party-advisory
Sources
- CVE List CVE-2023-5188
- NVD CVE-2023-5188
Fencer Vulns keeps one entry per vulnerability: the CVE id wins, then GHSA, and records that alias each other are merged, except that two CVEs always keep separate entries. The same data is available as JSON.