Skip to content
Wago vulnerabilities
Products
Show 160 moreShow less
Newest
-
wago 0750-811x-xxxx-xxxx, 0750-821x-xxx-xxx, 0751-9x01 +8 more +10 more
Path traversal in dynamically created BACnet File Objects
CVE-2025-41753
9.3 Critical
-
wago 0765-110x/0100-0000, 0765-120x/0100-0000, 0765-150x/0100-0000 +5 more +7 more
Unauthenticated Access to Internal Diagnostic Interface
CVE-2026-4769
9.3 Critical
-
wago smart designer
Wago: Vulnerability in Smart Designer Web-Application
CVE-2023-5872
4.3 Medium
-
wago cc100 (0751-9x01), edge controller (0752-8303-8000-0002), pfc100 g1 (0750-810-xxxx-xxxx) +10 more +12 more
Wago: Vulnerability in WBM through Open VPN
CVE-2024-1490
7.2 High
-
wago device sphere, solution builder +1 more
Backend Access Due to Insufficient Input Validation
CVE-2026-2328
7.5 High
-
wago industrial managed switch 852-1305, industrial managed switch 852-1305-000-001, industrial managed switch 852-1505 +13 more +15 more
Hidden CLI Function Allows Root Access
CVE-2026-3587
10.0 Critical
-
wago 0852-1322, 0852-1328 +1 more
Hardcoded Key Allows Credential Disclosure
CVE-2026-22906
9.8 Critical
-
wago 0852-1322, 0852-1328 +1 more
Authentication Bypass via URI Traversal
CVE-2026-22905
7.5 High
-
wago 0852-1322, 0852-1328 +1 more
Stack Overflow via Oversized Cookie Fields in lighttpd
CVE-2026-22904
9.8 Critical
-
wago 0852-1322, 0852-1328 +1 more
Stack Overflow via SESSIONID Cookie in lighttpd
CVE-2026-22903
9.8 Critical
-
wago 750-8212 pfc200
WAGO 750-8212 PFC200 G2 2ETH RS Privilege Escalation
CVE-2022-50926
8.7 High
-
wago 0852-1322 firmware, 0852-1328 firmware, indsutrial-managed-switches +2 more
Stack-based buffer overflow via unsafe sscanf in check_cookie()
CVE-2025-41732
9.8 Critical
-
wago 0852-1322 firmware, 0852-1328 firmware, indsutrial-managed-switches +2 more
Stack-based buffer overflow via unsafe sscanf in check_account()
CVE-2025-41730
9.8 Critical
-
wago solution builder
Unauthenticated User Enumeration via Missing Authentication
CVE-2025-41716
5.3 Medium
-
wago device sphere, solution builder +1 more
Missing Authentication for Database Access in Web Application
CVE-2025-41715
9.8 Critical
-
wago cc100 0751-9301, cc100 0751-9301 hw rev. <082100, cc100 0751-9301/k000-0005 +45 more +47 more
WAGO: Vulnerability in hardware switch circuit
CVE-2025-41713
6.5 Medium
-
wago coupler 0750-0362, coupler 0750-0362/0000-0001, coupler 0750-0362/0040-0000 +7 more +9 more
Improper Permission Handling Enables Unauthorized Access to Firmware and Certificates
CVE-2025-41664
7.5 High
-
wago device sphere
WAGO: Vulnerability in WAGO Device Sphere
CVE-2025-41672
10.0 Critical
-
wago cc100 0751-9x01, edge controller 0752-8303/8000-0002, pfc100 g1 0750-810x/xxxx-xxxx +9 more +11 more
Unauthenticated File Read via Web Interface
CVE-2025-25265
4.9 Medium
-
wago cc100 0751-9x01, edge controller 0752-8303/8000-0002, pfc100 g1 0750-810x/xxxx-xxxx +9 more +11 more
Overly Permissive CORS Policy in WAGO Device Manager
CVE-2025-25264
6.5 Medium
-
wago fully managed switches 0852-0303, fully managed switches 0852-1305, fully managed switches 0852-1305/0000-0001 +10 more +12 more
WAGO: Switches affected by year 2k38 problem
CVE-2025-1235
4.3 Medium
-
wago cc100 0751-9x01, pfc100 g1 0750-810x/xxxx-xxxx, pfc100 g2 0750-811x-xxxx-xxxx +9 more +11 more
WAGO: Year 2038 problem
CVE-2025-0101
6.5 Medium
-
wago cc100 0751-9x01, edge controller 0752-8303/8000-0002, pfc100 g1 0750-810x/xxxx-xxxx +9 more +11 more
Wago: Vulnerability in libwagosnmp
CVE-2024-12650
5.4 Medium
-
wago 750-8100 (controller pfc100), 750-831 (controller bacnet/ip), 750-880 (controller eth) +1 more +3 more
WAGO: Denial of service in 750-8xx controller due to uncontrolled resource consumption
CVE-2018-25108
7.5 High
-
wago cc100 0751-9x01, cc100 0751/9x01, edge controller 0752-8303/8000-0002 +9 more +11 more
WAGO: BACNet Service Property Modification Due to Permission Misconfiguration in Multiple Devices
CVE-2024-41974
7.1 High
-
wago cc100 0751-9x01, cc100 0751/9x01, edge controller 0752-8303/8000-0002 +9 more +11 more
WAGO: Remote Arbitrary File Write with Root Privileges in multiple Devices
CVE-2024-41973
8.1 High
-
wago cc100 0751-9x01, cc100 0751/9x01, edge controller 0752-8303/8000-0002 +9 more +11 more
WAGO: Arbitrary File Overwrite Leading to Privileged File Read in Multiple Devices
CVE-2024-41972
6.5 Medium
-
wago cc100 0751-9x01, cc100 0751/9x01, edge controller 0752-8303/8000-0002 +9 more +11 more
WAGO: Arbitrary File Overwrite in Multiple Devices
CVE-2024-41971
8.1 High
-
wago cc100 0751-9x01, cc100 0751/9x01, edge controller 0752-8303/8000-0002 +9 more +11 more
WAGO: Unauthorized Diagnostic Data Exposure in Multiple Devices
CVE-2024-41970
5.7 Medium
-
wago cc100 0751-9x01, cc100 0751/9x01, edge controller 0752-8303/8000-0002 +12 more +14 more
WAGO: CODESYS V3 Configuration Authentication Bypass in Multiple Devices
CVE-2024-41969
8.8 High
-
wago cc100 0751-9x01, cc100 0751/9x01, edge controller 0752-8303/8000-0002 +12 more +14 more
WAGO: Boot Mode Manipulation in Multiple Devices
CVE-2024-41967
8.1 High
-
wago cc100 0751-9x01, cc100 0751/9x01, edge controller 0752-8303/8000-0002 +12 more +14 more
WAGO: Docker Settings Manipulation in Multiple Devices
CVE-2024-41968
5.4 Medium
-
wago controller bacnet ms/tp, controller bacnet/ip, ethernet controller 3rd generation +1 more +3 more
Wago: Improper Neutralization of Input During Web Page Generation in multiple devices
CVE-2018-25090
5.4 Medium
-
wago 750-352 firmware, 750-829 firmware, 750-831 firmware +11 more +13 more
Wago: Buffer Copy without Checking Size of Input in wbm of multiple products
CVE-2015-10123
8.8 High
-
wago telecontrol configurator, wagoapprtu +1 more
WAGO Improper Input Validation in IEC61850 Server / Telecontrol
CVE-2023-5188
7.5 High
-
wago 0852-0602 firmware, 0852-0603 firmware, 0852-1605 firmware +3 more +5 more
WAGO: OS Command Injection Vulnerability in Managed Switch
CVE-2023-4149
9.8 Critical
-
wago compact controller 100 (751-9301), compact controller 100 firmware, edge controller (752-8303/8000-002) +12 more +14 more
WAGO: Improper Privilege Management in web-based management
CVE-2023-3379
5.3 Medium
-
wago compact controller cc100, compact controller 100 firmware, edge controller +11 more +13 more
WAGO: Multiple products vulnerable to local file inclusion
CVE-2023-4089
2.7 Low
-
wago 750-332, 750-362/xxx-xxx, 750-362\/000-001 firmware +26 more +28 more
WAGO: Series 750-3x/-8x prone to MODBUS server DoS
CVE-2023-1150
7.5 High
-
wago 750-331, 750-331 firmware, 750-332 +102 more +104 more
WAGO: DoS in multiple products in multiple versions using Codesys
CVE-2023-1620
4.9 Medium
-
wago 750-331, 750-331 firmware, 750-332 +102 more +104 more
WAGO: DoS in multiple versions of multiple products
CVE-2023-1619
4.9 Medium
-
wago compact controller cc100, compact controller 100 firmware, edge controller +11 more +13 more
WAGO: WBM Command Injection in multiple products
CVE-2023-1698
Public exploit
EPSS 81.9%
9.8 Critical
-
wago 751-9301 firmware, 752-8303\/8000-002 firmware, compact controller cc100 (751-9301) +11 more +13 more
WAGO: Missing Authentication for Critical Function
CVE-2022-45140
9.8 Critical
-
wago 751-9301 firmware, 752-8303\/8000-002 firmware, compact controller cc100 (751-9301) +11 more +13 more
WAGO: Origin validation error through CORS misconfiguration
CVE-2022-45139
5.3 Medium
-
wago 751-9301 firmware, 752-8303\/8000-002 firmware, compact controller cc100 (751-9301) +11 more +13 more
WAGO: Missing Authentication for Critical Function
CVE-2022-45138
9.8 Critical
-
wago 751-9301 firmware, 752-8303\/8000-002 firmware, compact controller cc100 (751-9301) +11 more +13 more
WAGO: Reflective Cross-Site Scripting
CVE-2022-45137
6.1 Medium
-
wago 852-111\/000-001 firmware, unmanaged switch 852-111/000-001 +1 more
WAGO: Exposure of configuration interface in unmanaged switches
CVE-2022-3843
9.1 Critical
-
wago cc100 firmware, edge controller firmware, pfc100 firmware +11 more +13 more
WAGO: Missing authentication for config export functionality in multiple products
CVE-2022-3738
5.9 Medium
-
codesys v3 containing the cmpusermgr, control for beaglebone, control for empc-a\/imx6 +62 more +64 more
CODESYS V3 prone to Inadequate Password Hashing
CVE-2020-12069
7.8 High
-
wago 750-8100 firmware, 750-8101\/025-000 firmware, 750-8101 firmware +52 more +54 more
WAGO I/O-Check Service prone to Out-of-bounds Write
CVE-2021-34569
9.8 Critical
- Show olderLoading…