Wago 752 8303\/8000 0002 vulnerabilities
5 vulnerabilities
Known vulnerabilities in Wago 752 8303\/8000 0002, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.
CVE-2021-34569wago750-8100_firmware+54
EPSS score0.87%
In WAGO I/O-Check Service in multiple products an attacker can send a specially crafted packet containing OS commands to crash the diagnostic tool and write memory.CVE-2021-34568wago750-8100_firmware+54EPSS score1.11%
In WAGO I/O-Check Service in multiple products an unauthenticated remote attacker can send a specially crafted packet containing OS commands to provoke a denial of service.CVE-2021-34567wago750-8100_firmware+54EPSS score0.86%
In WAGO I/O-Check Service in multiple products an unauthenticated remote attacker can send a specially crafted packet containing OS commands to provoke a denial of service and an limited out-of-bounds read.CVE-2021-34566wago750-8100_firmware+54EPSS score1.15%
In WAGO I/O-Check Service in multiple products an unauthenticated remote attacker can send a specially crafted packet containing OS commands to crash the iocheck process and write memory resulting in loss of integrity and DoS.CVE-2020-12069codesyscodesys v3 containing the cmpusermgr+64EPSS score0.17%
In CODESYS V3 products in all versions prior V3.5.16.0 containing the CmpUserMgr, the CODESYS Control runtime system stores the online communication passwords using a weak hashing algorithm. This can be used by a local attacker with low privileges to gain full control of the device.