Skip to contentWago vulnerabilities
Products
Show 140 moreShow less
Newest
- wago 750-8100 firmware, 750-8101\/025-000 firmware, 750-8101 firmware +52 more +54 moreWAGO I/O-Check Service prone to Allocation of Resources Without Limits or ThrottlingCVE-2021-345687.5 High
- wago 750-8100 firmware, 750-8101\/025-000 firmware, 750-8101 firmware +52 more +54 moreWAGO I/O-Check Service prone to Out-of-bounds ReadCVE-2021-345678.2 High
- wago 750-8100 firmware, 750-8101\/025-000 firmware, 750-8101 firmware +52 more +54 moreWAGO I/O-Check Service prone to Memory OverflowCVE-2021-345669.1 Critical
- wago compact controller cc100, 750-8100 firmware, 750-8101\/000-010 firmware +83 more +85 moreWAGO: multiple products - Loss of MAC-Address-Filtering after rebootCVE-2022-32817.5 High
- wago 750-8100 firmware, 750-8101\/025-000 firmware, 750-8101 firmware +29 more +31 moreWAGO PLCs WBM vulnerable to reflected XSSCVE-2022-225115.4 Medium
- codesys, codesys v2, plcwinnt +28 more +30 moreCODESYS V2 runtime: Access of Uninitialized Pointer may result in denial-of-serviceCVE-2021-345966.5 Medium
- codesys, codesys v2, plcwinnt +28 more +30 moreCODESYS V2 runtime: out-of-bounds read or write access may result in denial-of-serviceCVE-2021-345958.1 High
- codesys v2, plcwinnt, runtime toolkit +13 more +15 moreCODESYS V2 runtime: unauthenticated invalid requests may result in denial-of-serviceCVE-2021-345937.5 High
- codesys, codesys v2, wago 750-8202 firmware +26 more +28 moreCODESYS V2 web server: crafted requests could trigger a null pointer dereference (DoS)CVE-2021-34586EPSS 13.7%7.5 High
- codesys, codesys v2, wago 750-8202 firmware +26 more +28 moreCODESYS V2 web server: crafted requests could trigger a pointer dereference with an invalid address (DoS)CVE-2021-345857.5 High
- codesys, codesys v2, wago 750-8202 firmware +26 more +28 moreCODESYS V2 web server: crafted requests could trigger a buffer over-read (DoS)CVE-2021-345849.1 Critical
- codesys, codesys v2, wago 750-8202 firmware +26 more +28 moreCODESYS V2 web server: crafted requests could trigger a heap-based buffer overflow (DoS)CVE-2021-345837.5 High
- wago 750-831/xxx-xxx, 750-880/xxx-xxx, 750-881, 750-889, 750-831\/000-002 firmware, 750-831 firmware +7 more +9 moreWAGO: Denial of Service vulnerability inside the OpenSSL implementationCVE-2021-345817.5 High
- wago plc, 750-362 firmware, 750-363 firmware +10 more +12 moreWAGO: Authentication Vulnerability in Web-Based ManagementCVE-2021-345789.8 Critical
- codesys plcwinnt, runtime toolkit, wago 750-8202 firmware +26 more +28 moreCODESYS V2 runtime system before 2.4.7.55 has Improper Input Validation.CVE-2021-301957.5 High
- codesys v2 runtime system sp, wago 750-8202 firmware, 750-8203 firmware +25 more +27 moreCODESYS V2 runtime system SP before 2.4.7.55 has a Stack-based Buffer Overflow.CVE-2021-301889.8 Critical
- codesys plcwinnt, runtime toolkit, wago 750-8202 firmware +26 more +28 moreCODESYS V2 runtime system SP before 2.4.7.55 has a Heap-based Buffer Overflow.CVE-2021-301867.5 High
- codesys v2 web server, wago 750-8202 firmware, 750-8203 firmware +25 more +27 moreCODESYS V2 Web-Server before 1.1.9.20 has an Out-of-bounds Read.CVE-2021-301949.1 Critical
- codesys v2 web server, wago 750-8202 firmware, 750-8203 firmware +25 more +27 moreCODESYS V2 Web-Server before 1.1.9.20 has an Out-of-bounds Write.CVE-2021-301939.8 Critical
- codesys v2 web server, wago 750-8202 firmware, 750-8203 firmware +25 more +27 moreCODESYS V2 Web-Server before 1.1.9.20 has an Improperly Implemented Security Check.CVE-2021-301929.8 Critical
- codesys v2 web server, wago 750-8202 firmware, 750-8203 firmware +25 more +27 moreCODESYS V2 Web-Server before 1.1.9.20 has a a Buffer Copy without Checking the Size of the Input.CVE-2021-301917.5 High
- codesys v2 web server, wago 750-8202 firmware, 750-8203 firmware +25 more +27 moreCODESYS V2 Web-Server before 1.1.9.20 has Improper Access Control.CVE-2021-301909.8 Critical
- codesys v2 web server, wago 750-8202 firmware, 750-8203 firmware +25 more +27 moreCODESYS V2 Web-Server before 1.1.9.20 has a Stack-based Buffer Overflow.CVE-2021-301899.8 Critical
- codesys runtime toolkit, wago 750-8202 firmware, 750-8203 firmware +25 more +27 moreCODESYS V2 runtime system SP before 2.4.7.55 has Improper Neutralization of Special Elements used...CVE-2021-301875.3 Medium
- wago 750-8202 firmware, 750-8203 firmware, 750-8204 firmware +26 more +28 moreWAGO: PFC200 Access to files outside the home directoryCVE-2021-210019.1 Critical
- wago 750-8202 firmware, 750-8203 firmware, 750-8204 firmware +26 more +28 moreWAGO: PFC200 Denial of Service due to the number of connections to the runtimeCVE-2021-210005.3 Medium
- wago 0852-0303, 0852-0303 firmware, 0852-1305 +7 more +9 moreWAGO: Managed Switches: Unauthorized creation of user accountsCVE-2021-2099810.0 Critical
- wago 0852-0303, 0852-0303 firmware, 0852-1305 +7 more +9 moreWAGO: Managed Switches: Unauthorized access to password hashesCVE-2021-209977.5 High
- wago 0852-0303, 0852-0303 firmware, 0852-1305 +7 more +9 moreWAGO: Managed Switches: Unsecure Cookie settingsCVE-2021-209965.3 Medium
- wago 0852-0303, 0852-0303 firmware, 0852-1305 +7 more +9 moreWAGO: Managed Switches: Storage of user credentials in a cookieCVE-2021-209955.3 Medium
- wago 0852-0303, 0852-0303 firmware, 0852-1305 +7 more +9 moreWAGO: Managed Switches: Reflected Cross-site ScriptingCVE-2021-209948.8 High
- wago 0852-0303, 0852-0303 firmware, 0852-1305 +7 more +9 moreWAGO: Managed Switches: Exposure of sensitive information through directory listingCVE-2021-209935.3 Medium
- m&m software fdtcontainer component, emerson rosemount transmitter interface software, m&m software dtmlinspector +5 more +7 moreWAGO/M&M Software Deserialization of untrusted data in fdtCONTAINER componentCVE-2020-125257.3 High
- wago series pfc 100 (750-81xx/xxx-xxx), series pfc 200 (750-82xx/xxx-xxx), series wago touch panel 600 advanced line (762-5xxx) +7 more +9 moreCommand Injection Vulnerability in I/O-Check Service of WAGO PFC100, PFC200 and Touch Panel 600 Series with firmware versions <=FW10CVE-2020-1252210.0 Critical
- wago 750-352, 750-331/xxx-xxx, 750-331 firmware +17 more +19 moreWAGO: PLC families 750-88x and 750-352 prone to DoS attackCVE-2020-125167.5 High
- wago 750-362, 750-363, 750-823 +11 more +13 moreWAGO: Authentication Bypass Vulnerability in WAGO 750-36X and WAGO 750-8XX Versions <= FW03CVE-2020-125069.1 Critical
- wago 750-831/xxx-xxx, 750-852, 750-880/xxx-xxx +11 more +13 moreWAGO: Vulnerability in web-based authentication in WAGO 750-8XX Version <= FW07CVE-2020-125058.2 High
- wago pfc200 firmwareAn exploitable code execution vulnerability exists in the Web-Based Management (WBM)...CVE-2020-60907.2 High
- wago pfc200 firmwareAn exploitable stack buffer overflow vulnerability vulnerability exists in the iocheckd service ...CVE-2019-51857.0 High
- wago pfc200 firmwareAn exploitable double free vulnerability exists in the iocheckd service "I/O-Check" functionality...CVE-2019-51847.8 High
- wago pfc200 firmwareAn exploitable stack buffer overflow vulnerability vulnerability exists in the iocheckd service ...CVE-2019-51867.0 High
- wago pfc200 firmware, pfc200 +1 moreAn exploitable stack buffer overflow vulnerability vulnerability exists in the iocheckd service ...CVE-2019-51817.8 High
- wago pfc200 firmware, pfc200 +1 moreAn exploitable stack buffer overflow vulnerability vulnerability exists in the iocheckd service ...CVE-2019-51807.8 High
- wago pfc200 firmware, pfc200 +1 moreAn exploitable stack buffer overflow vulnerability vulnerability exists in the iocheckd service ...CVE-2019-51797.8 High
- wago pfc200 firmware, pfc200 +1 moreAn exploitable stack buffer overflow vulnerability vulnerability exists in the iocheckd service ...CVE-2019-51787.8 High
- wago pfc200 firmware, pfc200 +1 moreAn exploitable stack buffer overflow vulnerability vulnerability exists in the iocheckd service ...CVE-2019-51775.5 Medium
- wago pfc200 firmware, pfc200 +1 moreAn exploitable stack buffer overflow vulnerability vulnerability exists in the iocheckd service ...CVE-2019-51765.5 Medium
- wago pfc200 firmware, pfc200 +1 moreAn exploitable command injection vulnerability exists in the iocheckd service ‘I/O-Check’...CVE-2019-51717.8 High
- wago pfc200 firmware, pfc200 +1 moreAn exploitable command injection vulnerability exists in the iocheckd service ‘I/O-Check’...CVE-2019-51707.8 High
- wago pfc200 firmware, pfc200 +1 moreAn exploitable command injection vulnerability exists in the iocheckd service ‘I/O-Check’...CVE-2019-51697.8 High
- Show moreLoading…