Wago 0852 1505 vulnerabilities
6 vulnerabilities
Known vulnerabilities in Wago 0852 1505, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.
CVE-2021-20995wago0852-0303_firmware+4
EPSS score0.54%
In multiple managed switches by WAGO in different versions the webserver cookies of the web based UI contain user credentials.CVE-2021-20996wago0852-0303_firmware+4EPSS score0.75%
In multiple managed switches by WAGO in different versions special crafted requests can lead to cookies being transferred to third parties.CVE-2021-20993wago0852-0303_firmware+4EPSS score0.79%
In multiple managed switches by WAGO in different versions the activated directory listing provides an attacker with the index of the resources located inside the directory.CVE-2021-20998wago0852-0303_firmware+4EPSS score1.11%
In multiple managed switches by WAGO in different versions without authorization and with specially crafted packets it is possible to create users.CVE-2021-20997wago0852-0303_firmware+4EPSS score1.02%
In multiple managed switches by WAGO in different versions it is possible to read out the password hashes of all Web-based Management users.CVE-2021-20994wago0852-0303_firmware+4EPSS score0.63%
In multiple managed switches by WAGO in different versions an attacker may trick a legitimate user to click a link to inject possible malicious code into the Web-Based Management.