Wago Pfc100 vulnerabilities

• wago cc100 (0751-9x01), edge controller (0752-8303-8000-0002), pfc100 g1 (0750-810-xxxx-xxxx) +10 more +12 more Wago: Vulnerability in WBM through Open VPN CVE-2024-1490 7.2 HighApril 9, 2026
• wago cc100 0751-9x01, edge controller 0752-8303/8000-0002, pfc100 g1 0750-810x/xxxx-xxxx +9 more +11 more Unauthenticated File Read via Web Interface CVE-2025-25265 4.9 MediumJune 16, 2025
• wago cc100 0751-9x01, edge controller 0752-8303/8000-0002, pfc100 g1 0750-810x/xxxx-xxxx +9 more +11 more Overly Permissive CORS Policy in WAGO Device Manager CVE-2025-25264 6.5 MediumJune 16, 2025
• wago cc100 0751-9x01, pfc100 g1 0750-810x/xxxx-xxxx, pfc100 g2 0750-811x-xxxx-xxxx +9 more +11 more WAGO: Year 2038 problem CVE-2025-0101 6.5 MediumApril 16, 2025
• wago cc100 0751-9x01, edge controller 0752-8303/8000-0002, pfc100 g1 0750-810x/xxxx-xxxx +9 more +11 more Wago: Vulnerability in libwagosnmp CVE-2024-12650 5.4 MediumMarch 5, 2025
• wago 750-8100 (controller pfc100), 750-831 (controller bacnet/ip), 750-880 (controller eth) +1 more +3 more WAGO: Denial of service in 750-8xx controller due to uncontrolled resource consumption CVE-2018-25108 7.5 HighJanuary 16, 2025
• wago cc100 0751-9x01, cc100 0751/9x01, edge controller 0752-8303/8000-0002 +9 more +11 more WAGO: BACNet Service Property Modification Due to Permission Misconfiguration in Multiple Devices CVE-2024-41974 7.1 HighNovember 18, 2024
• wago cc100 0751-9x01, cc100 0751/9x01, edge controller 0752-8303/8000-0002 +9 more +11 more WAGO: Remote Arbitrary File Write with Root Privileges in multiple Devices CVE-2024-41973 8.1 HighNovember 18, 2024
• wago cc100 0751-9x01, cc100 0751/9x01, edge controller 0752-8303/8000-0002 +9 more +11 more WAGO: Arbitrary File Overwrite Leading to Privileged File Read in Multiple Devices CVE-2024-41972 6.5 MediumNovember 18, 2024
• wago cc100 0751-9x01, cc100 0751/9x01, edge controller 0752-8303/8000-0002 +9 more +11 more WAGO: Arbitrary File Overwrite in Multiple Devices CVE-2024-41971 8.1 HighNovember 18, 2024
• wago cc100 0751-9x01, cc100 0751/9x01, edge controller 0752-8303/8000-0002 +9 more +11 more WAGO: Unauthorized Diagnostic Data Exposure in Multiple Devices CVE-2024-41970 5.7 MediumNovember 18, 2024
• wago cc100 0751-9x01, cc100 0751/9x01, edge controller 0752-8303/8000-0002 +12 more +14 more WAGO: CODESYS V3 Configuration Authentication Bypass in Multiple Devices CVE-2024-41969 8.8 HighNovember 18, 2024
• wago cc100 0751-9x01, cc100 0751/9x01, edge controller 0752-8303/8000-0002 +12 more +14 more WAGO: Boot Mode Manipulation in Multiple Devices CVE-2024-41967 8.1 HighNovember 18, 2024
• wago cc100 0751-9x01, cc100 0751/9x01, edge controller 0752-8303/8000-0002 +12 more +14 more WAGO: Docker Settings Manipulation in Multiple Devices CVE-2024-41968 5.4 MediumNovember 18, 2024
• wago compact controller 100 (751-9301), compact controller 100 firmware, edge controller (752-8303/8000-002) +12 more +14 more WAGO: Improper Privilege Management in web-based management CVE-2023-3379 5.3 MediumNovember 20, 2023
• wago compact controller cc100, compact controller 100 firmware, edge controller +11 more +13 more WAGO: Multiple products vulnerable to local file inclusion CVE-2023-4089 2.7 LowOctober 17, 2023
• wago compact controller cc100, compact controller 100 firmware, edge controller +11 more +13 more WAGO: WBM Command Injection in multiple products CVE-2023-1698 Public exploit EPSS 81.9% 9.8 CriticalMay 15, 2023
• wago 751-9301 firmware, 752-8303\/8000-002 firmware, compact controller cc100 (751-9301) +11 more +13 more WAGO: Missing Authentication for Critical Function CVE-2022-45140 9.8 CriticalFebruary 27, 2023
• wago 751-9301 firmware, 752-8303\/8000-002 firmware, compact controller cc100 (751-9301) +11 more +13 more WAGO: Origin validation error through CORS misconfiguration CVE-2022-45139 5.3 MediumFebruary 27, 2023
• wago 751-9301 firmware, 752-8303\/8000-002 firmware, compact controller cc100 (751-9301) +11 more +13 more WAGO: Missing Authentication for Critical Function CVE-2022-45138 9.8 CriticalFebruary 27, 2023
• wago 751-9301 firmware, 752-8303\/8000-002 firmware, compact controller cc100 (751-9301) +11 more +13 more WAGO: Reflective Cross-Site Scripting CVE-2022-45137 6.1 MediumFebruary 27, 2023
• wago cc100 firmware, edge controller firmware, pfc100 firmware +11 more +13 more WAGO: Missing authentication for config export functionality in multiple products CVE-2022-3738 5.9 MediumJanuary 19, 2023
• wago compact controller cc100, 750-8100 firmware, 750-8101\/000-010 firmware +83 more +85 more WAGO: multiple products - Loss of MAC-Address-Filtering after reboot CVE-2022-3281 7.5 HighOctober 17, 2022
• wago 750-8100 firmware, 750-8101\/025-000 firmware, 750-8101 firmware +29 more +31 more WAGO PLCs WBM vulnerable to reflected XSS CVE-2022-22511 5.4 MediumMarch 9, 2022
• wago pfc100 firmware, pfc200 firmware +1 more An exploitable regular expression without anchors vulnerability exists in the Web-Based... CVE-2019-5134 7.5 HighMarch 10, 2020
• wago pfc100 firmware, pfc200 firmware +1 more An exploitable timing discrepancy vulnerability exists in the authentication functionality of the... CVE-2019-5135 5.3 MediumMarch 10, 2020
• wago pfc100 firmware, pfc200 firmware +1 more The WBM web application on firmwares prior to 03.02.02 and 03.01.07 on the WAGO PFC100 and... CVE-2019-5149 7.5 HighMarch 10, 2020
• wago pfc100 firmware, pfc200 firmware, pfc200 +2 more An exploitable heap buffer overflow vulnerability exists in the iocheckd service I/O-Check... CVE-2019-5082 9.8 CriticalJanuary 8, 2020
• abb 1sap120600r0071 pm554-tp-eth, pm554-tp-eth firmware, abb, phoenix contact, schneider electric, siemens, and wago 2700974 ilc 151 eth +19 more +21 more ABB, Phoenix Contact, Schneider Electric, Siemens, WAGO - Programmable Logic Controllers,... CVE-2019-10953 7.5 HighApril 17, 2019