Wago Tp600 0762 530X/8000 000X vulnerabilities
12 vulnerabilities
Known vulnerabilities in Wago Tp600 0762 530X/8000 000X, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.
MediumCVE-2025-0101wago · cc100 0751-9x01 +12 moreWAGO: Year 2038 problemA low privileged user can set the date of the devices to the 19th of January 2038 an therefore exceed the 32-Bit time limit. This causes some functions to work unexpected or stop working at all. Both during runtime and after a restart.EPSS0.39%MediumCVE-2025-25264wago · cc100 0751-9x01 +11 moreOverly Permissive CORS Policy in WAGO Device ManagerAn unauthenticated remote attacker can trick an admin to visit a website containing malicious java script code. The current overly permissive CORS policy allows the attacker to obtain any files from the file system.EPSS0.44%MediumCVE-2025-25265wago · cc100 0751-9x01 +12 moreUnauthenticated File Read via Web InterfaceA web application for configuring the controller is accessible at a specific path. It contains an endpoint that allows a high privileged remote attacker to read files from the system’s file structure.EPSS0.46%HighCVE-2024-41967wago · cc100 0751-9x01 +14 moreWAGO: Boot Mode Manipulation in Multiple DevicesA low privileged remote attacker may modify the boot mode configuration setup of the device, leading to modification of the firmware upgrade process or a denial-of-service attack.EPSS0.41%MediumCVE-2024-41972wago · cc100 0751-9x01 +11 moreWAGO: Arbitrary File Overwrite Leading to Privileged File Read in Multiple DevicesA low privileged remote attacker can overwrite an arbitrary file on the filesystem which may lead to an arbitrary file read with root privileges.EPSS0.59%HighCVE-2024-41971wago · cc100 0751-9x01 +11 moreWAGO: Arbitrary File Overwrite in Multiple DevicesA low privileged remote attacker can overwrite an arbitrary file on the filesystem leading to a DoS and data loss.EPSS0.63%MediumCVE-2024-41968wago · cc100 0751-9x01 +14 moreWAGO: Docker Settings Manipulation in Multiple DevicesA low privileged remote attacker may modify the docker settings setup of the device, leading to a limited DoS.EPSS0.34%HighCVE-2024-41969wago · cc100 0751-9x01 +14 moreWAGO: CODESYS V3 Configuration Authentication Bypass in Multiple DevicesA low privileged remote attacker may modify the configuration of the CODESYS V3 service through a missing authentication vulnerability which could lead to full system access and/or DoS.EPSS0.50%MediumCVE-2024-41970wago · cc100 0751-9x01 +11 moreWAGO: Unauthorized Diagnostic Data Exposure in Multiple DevicesA low privileged remote attacker may gain access to forbidden diagnostic data due to incorrect permission assignment for critical resources.EPSS0.34%HighCVE-2024-41974wago · cc100 0751-9x01 +11 moreWAGO: BACNet Service Property Modification Due to Permission Misconfiguration in Multiple DevicesA low privileged remote attacker may modify the BACNet service properties due to incorrect permission assignment for critical resources which may lead to a DoS limited to BACNet communication.EPSS0.36%HighCVE-2024-41973wago · cc100 0751-9x01 +11 moreWAGO: Remote Arbitrary File Write with Root Privileges in multiple DevicesA low privileged remote attacker can specify an arbitrary file on the filesystem which may lead to an arbitrary file writes with root privileges.EPSS0.63%MediumCVE-2024-12650wago · cc100 0751-9x01 +11 moreWago: Vulnerability in libwagosnmpAn attacker with low privileges can manipulate the requested memory size, causing the application to use an invalid memory area. This could lead to a crash of the application but it does not affected other applications.EPSS0.29%