Wago vulnerabilities

146 vulnerabilities

Known vulnerabilities in Wago products, newest first, with CVSS severity, EPSS, KEV listings and ransomware use, across 406 products.

Products

50 of 406
6.1CVE-2018-16210wago750-352_firmware+13
EPSS score
0.95%
WAGO 750-88X and WAGO 750-89X Ethernet Controller devices, versions 01.09.18(13) and before, have XSS in the SNMP configuration via the webserv/cplcfg/snmp.ssi SNMP_DESC or SNMP_LOC_SNMP_CONT field.5.4CVE-2018-25090wagocontroller bacnet ms/tp+3
EPSS score
0.40%
An unauthenticated remote attacker can use an XSS attack due to improper neutralization of input during web page generation. User interaction is required. This leads to a limited impact of confidentiality and integrity but no impact of availability.7.5CVE-2018-25108wago750-8100 controller pfc100+3
EPSS score
0.50%
An unauthenticated remote attacker can cause a DoS in the controller due to uncontrolled resource consumption.9.8CVE-2018-5459wagopfc200_firmware
EPSS score
2.68%
An Improper Authentication issue was discovered in WAGO PFC200 Series 3S CoDeSys Runtime versions 2.3.X and 2.4.X. An attacker can execute different unauthenticated remote operations because of the CoDeSys Runtime application, which is available via network by default on Port 2455. An attacker could execute some unauthenticated commands such as reading, writing, or deleting arbitrary files, or manipulate the PLC application during runtime by sending specially-crafted TCP packets to Port 2455.8.8CVE-2018-12980wago762-3000_firmware+3
EPSS score
29.80%
An issue was discovered on WAGO e!DISPLAY 762-3000 through 762-3003 devices with firmware before FW 02. The vulnerability allows an authenticated user to upload arbitrary files to the file system with the permissions of the web server.5.4CVE-2018-12981wago762-3000_firmware+3
EPSS score
5.17%
An issue was discovered on WAGO e!DISPLAY 762-3000 through 762-3003 devices with firmware before FW 02. The vulnerability can be exploited by authenticated and unauthenticated users by sending special crafted requests to the web server allowing injecting code within the WBM. The code will be rendered and/or executed in the browser of the user's browser.6.5CVE-2018-12979wago762-3000_firmware+3
EPSS score
7.78%
An issue was discovered on WAGO e!DISPLAY 762-3000 through 762-3003 devices with firmware before FW 02. Weak permissions allow an authenticated user to overwrite critical files by abusing the unrestricted file upload in the WBM.5.3CVE-2018-8836wago750-829_firmware+8
EPSS score
3.71%
Wago 750 Series PLCs with firmware version 10 and prior include a remote attack may take advantage of an improper implementation of the 3 way handshake during a TCP connection affecting the communications with commission and service tools. Specially crafted packets may also be sent to Port 2455/TCP/IP, used in Codesys management software, which may result in a denial-of-service condition of communications with commissioning and service tools.9.1CVE-2021-21001wago750-8202_firmware+28
EPSS score
1.13%
On WAGO PFC200 devices in different firmware versions with special crafted packets an authorised attacker with network access to the device can access the file system with higher privileges.7.5CVE-2021-21000wago750-8202_firmware+28
EPSS score
1.04%
On WAGO PFC200 devices in different firmware versions with special crafted packets an attacker with network access to the device could cause a denial of service for the login service of the runtime.7.5CVE-2021-20995wago0852-0303_firmware+4
EPSS score
0.54%
In multiple managed switches by WAGO in different versions the webserver cookies of the web based UI contain user credentials.5.3CVE-2021-20996wago0852-0303_firmware+4
EPSS score
0.75%
In multiple managed switches by WAGO in different versions special crafted requests can lead to cookies being transferred to third parties.5.3CVE-2021-20993wago0852-0303_firmware+4
EPSS score
0.79%
In multiple managed switches by WAGO in different versions the activated directory listing provides an attacker with the index of the resources located inside the directory.10CVE-2021-20998wago0852-0303_firmware+4
EPSS score
1.11%
In multiple managed switches by WAGO in different versions without authorization and with specially crafted packets it is possible to create users.7.5CVE-2021-20997wago0852-0303_firmware+4
EPSS score
1.02%
In multiple managed switches by WAGO in different versions it is possible to read out the password hashes of all Web-based Management users.8.8CVE-2021-20994wago0852-0303_firmware+4
EPSS score
0.63%
In multiple managed switches by WAGO in different versions an attacker may trick a legitimate user to click a link to inject possible malicious code into the Web-Based Management.9.8CVE-2021-30190codesysv2_web_server+27
EPSS score
1.39%
CODESYS V2 Web-Server before 1.1.9.20 has Improper Access Control.9.8CVE-2021-30188codesysv2_runtime_system_sp+27
EPSS score
1.27%
CODESYS V2 runtime system SP before 2.4.7.55 has a Stack-based Buffer Overflow.9.8CVE-2021-30193codesysv2_web_server+27
EPSS score
1.12%
CODESYS V2 Web-Server before 1.1.9.20 has an Out-of-bounds Write.7.5CVE-2021-30195codesysplcwinnt+28
EPSS score
7.55%
CODESYS V2 runtime system before 2.4.7.55 has Improper Input Validation.