Wago 750 8202\/000 012 vulnerabilities
8 vulnerabilities
Known vulnerabilities in Wago 750 8202\/000 012, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.
CVE-2021-34569wago750-8100_firmware+54
EPSS score0.87%
In WAGO I/O-Check Service in multiple products an attacker can send a specially crafted packet containing OS commands to crash the diagnostic tool and write memory.CVE-2021-34568wago750-8100_firmware+54EPSS score1.11%
In WAGO I/O-Check Service in multiple products an unauthenticated remote attacker can send a specially crafted packet containing OS commands to provoke a denial of service.CVE-2021-34567wago750-8100_firmware+54EPSS score0.86%
In WAGO I/O-Check Service in multiple products an unauthenticated remote attacker can send a specially crafted packet containing OS commands to provoke a denial of service and an limited out-of-bounds read.CVE-2021-34566wago750-8100_firmware+54EPSS score1.15%
In WAGO I/O-Check Service in multiple products an unauthenticated remote attacker can send a specially crafted packet containing OS commands to crash the iocheck process and write memory resulting in loss of integrity and DoS.CVE-2022-22511wago750-8100_firmware+31EPSS score0.48%
Various configuration pages of the device are vulnerable to reflected XSS (Cross-Site Scripting) attacks. An authorized attacker with user privileges may use this to gain access to confidential information on a PC that connects to the WBM after it has been compromised.CVE-2022-3281wago750-8100_firmware+85EPSS score0.79%
WAGO Series PFC100/PFC200, Series Touch Panel 600, Compact Controller CC100 and Edge Controller in multiple versions are prone to a loss of MAC-Address-Filtering after reboot. This may allow an remote attacker to circumvent the reach the network that should be protected by the MAC address filter.CVE-2023-1619wago750-331_firmware+94EPSS score0.79%
Multiple WAGO devices in multiple versions may allow an authenticated remote attacker with high privileges to DoS the device by sending a malformed packet.CVE-2023-1620wago750-331_firmware+94EPSS score0.85%
Multiple WAGO devices in multiple versions may allow an authenticated remote attacker with high privileges to DoS the device by sending a specifically crafted packet to the CODESYS V2 runtime.