CVE-2015-10123: Wago: Buffer Copy without Checking Size of Input in wbm of multiple products
An unautheticated remote attacker could send specifically crafted packets to a affected device. If an authenticated user then views that data in a specific page of the web-based management a buffer overflow will be triggered to gain full access of the device.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2015-10123?
CVE-2015-10123 is considered a critical vulnerability due to its potential for remote execution and device takeover.
How do I fix CVE-2015-10123?
To fix CVE-2015-10123, update the affected Wago products to the latest firmware version provided by the vendor.
What types of devices are affected by CVE-2015-10123?
CVE-2015-10123 affects multiple products from Wago that utilize web-based management interfaces.
Can CVE-2015-10123 be exploited without authentication?
Yes, an unauthenticated remote attacker can exploit CVE-2015-10123 by sending specially crafted packets.
What happens if a user views the malicious data in their browser related to CVE-2015-10123?
If an authenticated user views the malicious data, it can trigger a buffer overflow, allowing an attacker to gain full access to the device.