WAGO libwagosnmp Unchecked Return Value Vulnerability Leading to Application Crash

A vulnerability exists in the WAGO PFC firmware SDK-G2 component of libwagosnmp, affecting several WAGO products, including various PFC, Edge Controller, and TP600 models, all prior to specific firmware versions. This vulnerability allows an attacker with low privileges to manipulate requested memory sizes, causing the application to access invalid memory areas. The result is a crash of the application, although other applications remain unaffected.

Impact

Exploitation of this vulnerability can cause the application to crash by accessing invalid memory areas, disrupting the application's normal operation.

Remediation

Users are advised to update to Firmware 4.7.1 (FW29) or Firmware 03.10.11. For the latest Custom Firmware, please contact WAGO support.