Wago Controller Bacnet/Ip vulnerabilities

2 vulnerabilities

Known vulnerabilities in Wago Controller Bacnet/Ip, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

5.4CVE-2018-25090wagocontroller bacnet ms/tp+3
EPSS score
0.40%
An unauthenticated remote attacker can use an XSS attack due to improper neutralization of input during web page generation. User interaction is required. This leads to a limited impact of confidentiality and integrity but no impact of availability.8.8CVE-2015-10123wagocontroller bacnet ms/tp+3
EPSS score
0.64%
An unautheticated remote attacker could send specifically crafted packets to a affected device. If an authenticated user then views that data in a specific page of the web-based management a buffer overflow will be triggered to gain full access of the device.