Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 9

CVE-2022-3281

WAGO: multiple products - Loss of MAC-Address-Filtering after reboot

WAGO Series PFC100/PFC200, Series Touch Panel 600, Compact Controller CC100 and Edge Controller in multiple versions are prone to a loss of MAC-Address-Filtering after reboot. This may allow an remote attacker to circumvent the reach the network that should be protected by the MAC address filter.

CVSS 3.1 · 7.5 High EPSS < 1% KEV · Not listed
Vendors
Wago
Products
750-8100 750-8100 Firmware 750-8101 and 153 more
CVE-2021-34569

WAGO I/O-Check Service prone to Out-of-bounds Write

In WAGO I/O-Check Service in multiple products an attacker can send a specially crafted packet containing OS commands to crash the diagnostic tool and write memory.

CVSS 3.1 · 9.8 Critical EPSS < 1% KEV · Not listed
Vendors
Wago
Products
750-8100 750-8100 Firmware 750-8101 and 95 more
CVE-2021-34566

WAGO I/O-Check Service prone to Memory Overflow

In WAGO I/O-Check Service in multiple products an unauthenticated remote attacker can send a specially crafted packet containing OS commands to crash the iocheck process and write memory resulting in loss of integrity and DoS.

CVSS 3.1 · 9.1 Critical EPSS 1.4% KEV · Not listed
Vendors
Wago
Products
750-8100 750-8100 Firmware 750-8101 and 95 more
CVE-2021-34567

WAGO I/O-Check Service prone to Out-of-bounds Read

In WAGO I/O-Check Service in multiple products an unauthenticated remote attacker can send a specially crafted packet containing OS commands to provoke a denial of service and an limited out-of-bounds read.

CVSS 3.1 · 8.2 High EPSS 1.0% KEV · Not listed
Vendors
Wago
Products
750-8100 750-8100 Firmware 750-8101 and 95 more
CVE-2021-34568

WAGO I/O-Check Service prone to Allocation of Resources Without Limits or Throttling

In WAGO I/O-Check Service in multiple products an unauthenticated remote attacker can send a specially crafted packet containing OS commands to provoke a denial of service.

CVSS 3.1 · 7.5 High EPSS 1.2% KEV · Not listed
Vendors
Wago
Products
750-8100 750-8100 Firmware 750-8101 and 95 more
CVE-2023-1620

WAGO: DoS in multiple products in multiple versions using Codesys

Multiple WAGO devices in multiple versions may allow an authenticated remote attacker with high privileges to DoS the device by sending a specifically crafted packet to the CODESYS V2 runtime.

CVSS 3.1 · 4.9 Medium EPSS < 1% KEV · Not listed
Vendors
Wago
Products
750-331 750-331 Firmware 750-8202 and 149 more
CVE-2023-1619

WAGO: DoS in multiple versions of multiple products

Multiple WAGO devices in multiple versions may allow an authenticated remote attacker with high privileges to DoS the device by sending a malformed packet.

CVSS 3.1 · 4.9 Medium EPSS < 1% KEV · Not listed
Vendors
Wago
Products
750-331 750-331 Firmware 750-8202 and 149 more
CVE-2022-22511

WAGO PLCs WBM vulnerable to reflected XSS

Various configuration pages of the device are vulnerable to reflected XSS (Cross-Site Scripting) attacks. An authorized attacker with user privileges may use this to gain access to confidential information on a PC that connects to the WBM after it has been compromised.

CVSS 3.1 · 5.4 Medium EPSS < 1% KEV · Not listed
Vendors
Wago
Products
750-8100 750-8100 Firmware 750-8101 and 46 more
CVE-2020-12522

Command Injection Vulnerability in I/O-Check Service of WAGO PFC100, PFC200 and Touch Panel 600 Series with firmware versions <=FW10

The reported vulnerability allows an attacker who has network access to the device to execute code with specially crafted packets in WAGO Series PFC 100 (750-81xx/xxx-xxx), Series PFC 200 (750-82xx/xxx-xxx), Series Wago Touch Panel 600 Standard Line (762-4xxx), Series Wago Touch Panel 600 Advanced Line (762-5xxx), Series Wago Touch Panel 600 Marine Line (762-6xxx) with firmware versions <=FW10.

CVSS 3.1 · 10 Critical EPSS 3.1% KEV · Not listed
Vendors
Wago
Products
750-8101\/025-000 750-8102\/025-000 750-8202\/000-012 and 39 more