CVE-2021-30190
CODESYS V2 Web-Server before 1.1.9.20 has Improper Access Control.
CODESYS V2 Web-Server before 1.1.9.20 has Improper Access Control.
Attack profile
How easy it is to exploit
- Attack vector
- Network
- Complexity
- Low
- Privileges needed
- None
- User interaction
- None
What an attacker can affect
- Confidentiality
- High
- Integrity
- High
- Availability
- High
Exploit likelihood
What each source reports
NVD Score used
CODESYS V2 Web-Server before 1.1.9.20 has Improper Access Control.
- Record
CVE-2021-30190- CVSS 3.1
- 9.8 Critical
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H - CVSS 2.0
- 7.5 High
AV:N/AC:L/Au:N/C:P/I:P/A:P - Weakness
- CWE-306
- Updated
- 2026-11-02
CVE List No score
CODESYS V2 Web-Server before 1.1.9.20 has Improper Access Control.
- Record
CVE-2021-30190- Updated
- 2026-11-02
EUVDEUVD-2021-17122 No score
CODESYS V2 Web-Server before 1.1.9.20 has Improper Access Control.
- Record
EUVD-2021-17122- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-grjg-25gc-44cm
CODESYS V2 Web-Server before 1.1.9.20 has Improper Access Control.
CODESYS V2 Web-Server before 1.1.9.20 has Improper Access Control.
- Record
GHSA-grjg-25gc-44cm- CVSS 3.1
- 9.8 Critical
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H - Weakness
- CWE-306, CWE-668
- Updated
- 2026-11-02
Affected products
- codesys v2 web server
- wago 750-8202 firmware
- wago 750-8203 firmware
- wago 750-8204 firmware
- wago 750-8206 firmware
- wago 750-8207 firmware
- wago 750-8208 firmware
- wago 750-8210 firmware
- wago 750-8211 firmware
- wago 750-8212 firmware
- wago 750-8213 firmware
- wago 750-8214 firmware
Show 16 moreShow less
- wago 750-8216 firmware
- wago 750-8217 firmware
- wago 750-823 firmware
- wago 750-829 firmware
- wago 750-831 firmware
- wago 750-832 firmware
- wago 750-852 firmware
- wago 750-862 firmware
- wago 750-880 firmware
- wago 750-881 firmware
- wago 750-882 firmware
- wago 750-885 firmware
- wago 750-889 firmware
- wago 750-890 firmware
- wago 750-891 firmware
- wago 750-893 firmware
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2021-30190 is a critical vulnerability (CVSS 9.8) in Codesys V2 Web Server, published May 25, 2021. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 1.39%, the 72nd percentile. No source names a fixed version.