Wago Edge Controller vulnerabilities

• wago cc100 (0751-9x01), edge controller (0752-8303-8000-0002), pfc100 g1 (0750-810-xxxx-xxxx) +10 more +12 more Wago: Vulnerability in WBM through Open VPN CVE-2024-1490 7.2 HighApril 9, 2026
• wago cc100 0751-9301, cc100 0751-9301 hw rev. <082100, cc100 0751-9301/k000-0005 +45 more +47 more WAGO: Vulnerability in hardware switch circuit CVE-2025-41713 6.5 MediumSeptember 15, 2025
• wago cc100 0751-9x01, edge controller 0752-8303/8000-0002, pfc100 g1 0750-810x/xxxx-xxxx +9 more +11 more Unauthenticated File Read via Web Interface CVE-2025-25265 4.9 MediumJune 16, 2025
• wago cc100 0751-9x01, edge controller 0752-8303/8000-0002, pfc100 g1 0750-810x/xxxx-xxxx +9 more +11 more Overly Permissive CORS Policy in WAGO Device Manager CVE-2025-25264 6.5 MediumJune 16, 2025
• wago cc100 0751-9x01, pfc100 g1 0750-810x/xxxx-xxxx, pfc100 g2 0750-811x-xxxx-xxxx +9 more +11 more WAGO: Year 2038 problem CVE-2025-0101 6.5 MediumApril 16, 2025
• wago cc100 0751-9x01, edge controller 0752-8303/8000-0002, pfc100 g1 0750-810x/xxxx-xxxx +9 more +11 more Wago: Vulnerability in libwagosnmp CVE-2024-12650 5.4 MediumMarch 5, 2025
• wago cc100 0751-9x01, cc100 0751/9x01, edge controller 0752-8303/8000-0002 +9 more +11 more WAGO: BACNet Service Property Modification Due to Permission Misconfiguration in Multiple Devices CVE-2024-41974 7.1 HighNovember 18, 2024
• wago cc100 0751-9x01, cc100 0751/9x01, edge controller 0752-8303/8000-0002 +9 more +11 more WAGO: Remote Arbitrary File Write with Root Privileges in multiple Devices CVE-2024-41973 8.1 HighNovember 18, 2024
• wago cc100 0751-9x01, cc100 0751/9x01, edge controller 0752-8303/8000-0002 +9 more +11 more WAGO: Arbitrary File Overwrite Leading to Privileged File Read in Multiple Devices CVE-2024-41972 6.5 MediumNovember 18, 2024
• wago cc100 0751-9x01, cc100 0751/9x01, edge controller 0752-8303/8000-0002 +9 more +11 more WAGO: Arbitrary File Overwrite in Multiple Devices CVE-2024-41971 8.1 HighNovember 18, 2024
• wago cc100 0751-9x01, cc100 0751/9x01, edge controller 0752-8303/8000-0002 +9 more +11 more WAGO: Unauthorized Diagnostic Data Exposure in Multiple Devices CVE-2024-41970 5.7 MediumNovember 18, 2024
• wago cc100 0751-9x01, cc100 0751/9x01, edge controller 0752-8303/8000-0002 +12 more +14 more WAGO: CODESYS V3 Configuration Authentication Bypass in Multiple Devices CVE-2024-41969 8.8 HighNovember 18, 2024
• wago cc100 0751-9x01, cc100 0751/9x01, edge controller 0752-8303/8000-0002 +12 more +14 more WAGO: Boot Mode Manipulation in Multiple Devices CVE-2024-41967 8.1 HighNovember 18, 2024
• wago cc100 0751-9x01, cc100 0751/9x01, edge controller 0752-8303/8000-0002 +12 more +14 more WAGO: Docker Settings Manipulation in Multiple Devices CVE-2024-41968 5.4 MediumNovember 18, 2024
• wago compact controller 100 (751-9301), compact controller 100 firmware, edge controller (752-8303/8000-002) +12 more +14 more WAGO: Improper Privilege Management in web-based management CVE-2023-3379 5.3 MediumNovember 20, 2023
• wago compact controller cc100, compact controller 100 firmware, edge controller +11 more +13 more WAGO: Multiple products vulnerable to local file inclusion CVE-2023-4089 2.7 LowOctober 17, 2023
• wago compact controller cc100, compact controller 100 firmware, edge controller +11 more +13 more WAGO: WBM Command Injection in multiple products CVE-2023-1698 Public exploit EPSS 81.9% 9.8 CriticalMay 15, 2023
• wago 751-9301 firmware, 752-8303\/8000-002 firmware, compact controller cc100 (751-9301) +11 more +13 more WAGO: Missing Authentication for Critical Function CVE-2022-45140 9.8 CriticalFebruary 27, 2023
• wago 751-9301 firmware, 752-8303\/8000-002 firmware, compact controller cc100 (751-9301) +11 more +13 more WAGO: Origin validation error through CORS misconfiguration CVE-2022-45139 5.3 MediumFebruary 27, 2023
• wago 751-9301 firmware, 752-8303\/8000-002 firmware, compact controller cc100 (751-9301) +11 more +13 more WAGO: Missing Authentication for Critical Function CVE-2022-45138 9.8 CriticalFebruary 27, 2023
• wago 751-9301 firmware, 752-8303\/8000-002 firmware, compact controller cc100 (751-9301) +11 more +13 more WAGO: Reflective Cross-Site Scripting CVE-2022-45137 6.1 MediumFebruary 27, 2023
• wago cc100 firmware, edge controller firmware, pfc100 firmware +11 more +13 more WAGO: Missing authentication for config export functionality in multiple products CVE-2022-3738 5.9 MediumJanuary 19, 2023
• wago compact controller cc100, 750-8100 firmware, 750-8101\/000-010 firmware +83 more +85 more WAGO: multiple products - Loss of MAC-Address-Filtering after reboot CVE-2022-3281 7.5 HighOctober 17, 2022
• wago 750-8100 firmware, 750-8101\/025-000 firmware, 750-8101 firmware +29 more +31 more WAGO PLCs WBM vulnerable to reflected XSS CVE-2022-22511 5.4 MediumMarch 9, 2022