WAGO PFC100 — Schwachstelle CVE-2018-25108

An unauthenticated remote attacker can cause a DoS in the controller due to uncontrolled resource consumption.

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

We recommend to operate the devices in closed networks or protect with a firewall against unauthorized access. Another, recommended mitigation is to limit the network traffic via the switch rate limit feature according to your application needs. The switch rate limit can be configured e.g. via Web based Management to minimize the effect of high network load: 750-8xx: Ethernet > "Misc. Configuration" > "internal Port" > "Output Limit Rate" 750-8xxx: Network > Ethernet > 'Switch Configuration' > 'Rate Limit' Please also consult the product manuals as this is a known problem for some devices: 750-880 Go to https://www.wago.com/de/sps/controller-ethernet/p/750-880 external link Select "Downloads" In section "Dokumentation" choose "ETHERNET Programmierbarer Feldbuscontroller 10 / 100 Mbit/s; digitale und analoge Signale V 2.3.0, 03.08.2016" and select your language for the manual. See section 9.3: Functional Restrictions and Limits 750-889 Go to https://www.wago.com/de/sps/controller-ethernet/p/750-889 external link Select "Downloads" In section "Dokumentation" choose "Controller KNX IP KNX IP Controller V 1.0.2, 04.10.2016" and select your language for the manual. See section 10.4: Functional Restrictions and Limits 750-831 Go to https://www.wago.com/de/sps/controller-ethernet/p/750-831 external link Select "Downloads" In section "Dokumentation" choose "BACnet/IP Programmierbarer Feldbuscontroller 10/100 Mbit/s; digitale und analoge Signale V 1.2.1, 20.02.2017" and select your language for the manual. See section 9.5: Functional Restrictions and Limits