Wago 750 8202 vulnerabilities, page 2
27 vulnerabilities
Known vulnerabilities in Wago 750 8202, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.
CVE-2021-34586codesyscodesys+28
EPSS score13.74%
In the CODESYS V2 web server prior to V1.1.9.22 crafted web server requests may cause a Null pointer dereference in the CODESYS web server and may result in a denial-of-service condition.CVE-2021-34566wago750-8100_firmware+54EPSS score1.15%
In WAGO I/O-Check Service in multiple products an unauthenticated remote attacker can send a specially crafted packet containing OS commands to crash the iocheck process and write memory resulting in loss of integrity and DoS.CVE-2021-34585codesyscodesys+28EPSS score0.90%
In the CODESYS V2 web server prior to V1.1.9.22 crafted web server requests can trigger a parser error. Since the parser result is not checked under all conditions, a pointer dereference with an invalid address can occur. This leads to a denial of service situation.CVE-2020-12069codesyscodesys v3 containing the cmpusermgr+64EPSS score0.17%
In CODESYS V3 products in all versions prior V3.5.16.0 containing the CmpUserMgr, the CODESYS Control runtime system stores the online communication passwords using a weak hashing algorithm. This can be used by a local attacker with low privileges to gain full control of the device.CVE-2022-22511wago750-8100_firmware+31EPSS score0.48%
Various configuration pages of the device are vulnerable to reflected XSS (Cross-Site Scripting) attacks. An authorized attacker with user privileges may use this to gain access to confidential information on a PC that connects to the WBM after it has been compromised.CVE-2023-1619wago750-331_firmware+94EPSS score0.79%
Multiple WAGO devices in multiple versions may allow an authenticated remote attacker with high privileges to DoS the device by sending a malformed packet.CVE-2023-1620wago750-331_firmware+94EPSS score0.85%
Multiple WAGO devices in multiple versions may allow an authenticated remote attacker with high privileges to DoS the device by sending a specifically crafted packet to the CODESYS V2 runtime.