Wago Edge Controller 0752 8303/8000 0002 vulnerabilities
12 vulnerabilities
Known vulnerabilities in Wago Edge Controller 0752 8303/8000 0002, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.
CVE-2025-41713wagocc100 0751-9301+47
EPSS score0.37%
During a short time frame while the device is booting an unauthenticated remote attacker can send traffic to unauthorized networks due to the switch operating in an undefined state until a CPU-induced reset allows proper configuration.CVE-2025-25264wagocc100 0751-9x01+11EPSS score0.44%
An unauthenticated remote attacker can trick an admin to visit a website containing malicious java script code. The current overly permissive CORS policy allows the attacker to obtain any files from the file system.CVE-2025-25265wagocc100 0751-9x01+12EPSS score0.46%
A web application for configuring the controller is accessible at a specific path. It contains an endpoint that allows a high privileged remote attacker to read files from the system’s file structure.CVE-2024-41967wagocc100 0751-9x01+14EPSS score0.41%
A low privileged remote attacker may modify the boot mode configuration setup of the device, leading to modification of the firmware upgrade process or a denial-of-service attack.CVE-2024-41972wagocc100 0751-9x01+11EPSS score0.59%
A low privileged remote attacker can overwrite an arbitrary file on the filesystem which may lead to an arbitrary file read with root privileges.CVE-2024-41971wagocc100 0751-9x01+11EPSS score0.63%
A low privileged remote attacker can overwrite an arbitrary file on the filesystem leading to a DoS and data loss.CVE-2024-41968wagocc100 0751-9x01+14EPSS score0.34%
A low privileged remote attacker may modify the docker settings setup of the device, leading to a limited DoS.CVE-2024-41969wagocc100 0751-9x01+14EPSS score0.50%
A low privileged remote attacker may modify the configuration of the CODESYS V3 service through a missing authentication vulnerability which could lead to full system access and/or DoS.CVE-2024-41970wagocc100 0751-9x01+11EPSS score0.34%
A low privileged remote attacker may gain access to forbidden diagnostic data due to incorrect permission assignment for critical resources.CVE-2024-41974wagocc100 0751-9x01+11EPSS score0.36%
A low privileged remote attacker may modify the BACNet service properties due to incorrect permission assignment for critical resources which may lead to a DoS limited to BACNet communication.CVE-2024-41973wagocc100 0751-9x01+11EPSS score0.63%
A low privileged remote attacker can specify an arbitrary file on the filesystem which may lead to an arbitrary file writes with root privileges.CVE-2024-12650wagocc100 0751-9x01+11EPSS score0.29%
An attacker with low privileges can manipulate the requested memory size, causing the application to use an invalid memory area. This could lead to a crash of the application but it does not affected other applications.