Read the docs

WAGO

Records146All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical50CVSS 9.0–10.0
CVSS high61CVSS 7.0–8.9

Exploited now

WAGO records in CISA KEV

No WAGO vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Pfc200 Firmware 40 records CRITICAL 750-8202 Firmware 27 records MEDIUM 750-881 Firmware 27 records MEDIUM 750-831 Firmware 26 records MEDIUM 750-880 Firmware 26 records MEDIUM 750-889 Firmware 26 records MEDIUM 750-852 Firmware 25 records MEDIUM 750-823 Firmware 24 records MEDIUM

Records

40 records in Pfc200 Firmware · all components

TI-2023-01594 CVE-2023-1698 · GHSA-vf3g-hqqf-r379

WAGO: WBM Command Injection in multiple products

Priority CRITICAL 89

In multiple products of WAGO a vulnerability allows an unauthenticated, remote attacker to create new users and change the device configuration which can result in unintended behaviour, Denial of Service and full system…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.81911 Published 2023-05-15 No fix listed CWE-78
TI-2019-03543 CVE-2019-5082 · GHSA-hc2w-f6x6-qrc8

Out-of-bounds write in WAGO PFC200

Priority MEDIUM 48

An exploitable heap buffer overflow vulnerability exists in the iocheckd service I/O-Check functionality of WAGO PFC200 Firmware version 03.01.07(13), WAGO PFC200 Firmware version 03.00.39(12), and WAGO PFC100 Firmware v…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.03316 Published 2020-01-08 No fix listed CWE-787
TI-2018-03970 CVE-2018-5459 · GHSA-qff4-8m6q-cpvp

Improper authentication in WAGO PFC200 Series

Priority MEDIUM 47

An Improper Authentication issue was discovered in WAGO PFC200 Series 3S CoDeSys Runtime versions 2.3.X and 2.4.X.

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.02676 Published 2018-02-13 No fix listed CWE-287
TI-2022-22215 CVE-2022-45140 · GHSA-4p8v-g44f-p8hp

WAGO: Missing Authentication for Critical Function

Priority MEDIUM 45

The configuration backend allows an unauthenticated user to write arbitrary data with root privileges to the storage, which could lead to unauthenticated remote code execution and full system compromise.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01067 Published 2023-02-27 Fixed in FW22, FW22 Patch 1 CWE-306
TI-2019-03617 CVE-2019-5161 · GHSA-9x65-cc3m-jr94

Insufficient verification of data authenticity in WAGO PFC200 Firmware

Priority MEDIUM 44

An exploitable remote code execution vulnerability exists in the Cloud Connectivity functionality of WAGO PFC200 versions 03.02.02(14), 03.01.07(13), and 03.00.39(12).

CVSS 3.1CRITICAL 9.1 Network High privileges No interaction EPSS 0.02508 Published 2020-03-10 No fix listed CWE-345
TI-2022-22213 CVE-2022-45138 · GHSA-hq37-597p-8qrg

WAGO: Missing Authentication for Critical Function

Priority MEDIUM 43

The configuration backend of the web-based management can be used by unauthenticated users, although only authenticated users should be able to use the API.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.0074 Published 2023-02-27 Fixed in FW22, FW22 Patch 1 CWE-306
TI-2016-07635 CVE-2016-9362 · GHSA-9grp-vp5p-rx5w

Improper authentication in WAGO Ethernet cards

Priority MEDIUM 43

An issue was discovered in WAGO 750-8202/PFC200 prior to FW04 (released August 2015), WAGO 750-881 prior to FW09 (released August 2016), and WAGO 0758-0874-0000-0111.

CVSS 3.0CRITICAL 9.1 Network No auth No interaction EPSS 0.02125 Published 2017-02-13 No fix listed CWE-287
TI-2019-03613 CVE-2019-5157 · GHSA-hg2c-v89x-vqw7

OS command injection in WAGO PFC200 Firmware

Priority LOW 39

An exploitable command injection vulnerability exists in the Cloud Connectivity functionality of WAGO PFC200 Firmware versions 03.02.02(14), 03.01.07(13), and 03.00.39(12).

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.04179 Published 2020-03-10 No fix listed CWE-78
TI-2019-03612 CVE-2019-5156 · GHSA-4wh8-v3px-8552

OS command injection in WAGO PFC200 Firmware

Priority LOW 39

An exploitable command injection vulnerability exists in the cloud connectivity functionality of WAGO PFC200 versions 03.02.02(14), 03.01.07(13), and 03.00.39(12).

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.04179 Published 2020-03-10 No fix listed CWE-78
TI-2019-03611 CVE-2019-5155 · GHSA-2g7j-m3mp-pr8p

OS command injection in WAGO PFC200 Firmware

Priority LOW 39

An exploitable command injection vulnerability exists in the cloud connectivity feature of WAGO PFC200.

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.04614 Published 2020-03-10 No fix listed CWE-78
TI-2019-03631 CVE-2019-5175 · GHSA-pgmx-7rcq-jpg9

OS command injection in WAGO PFC200

Priority LOW 37

An exploitable command injection vulnerability exists in the iocheckd service ‘I/O-Check’ function of the WAGO PFC 200 Firmware version 03.02.02(14).

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.01358 Published 2020-03-11 No fix listed CWE-78
TI-2019-03630 CVE-2019-5174 · GHSA-62g4-v938-xwvh

OS command injection in WAGO PFC200 Firmware

Priority LOW 37

An exploitable command injection vulnerability exists in the iocheckd service ‘I/O-Check’ function of the WAGO PFC 200 version 03.02.02(14).

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.01358 Published 2020-03-11 No fix listed CWE-78
TI-2019-03629 CVE-2019-5173 · GHSA-j73j-p6cq-cmxj

OS command injection in WAGO PFC200

Priority LOW 37

An exploitable command injection vulnerability exists in the iocheckd service ‘I/O-Check’ function of the WAGO PFC 200 Firmware version 03.02.02(14).

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.01358 Published 2020-03-11 No fix listed CWE-78
TI-2019-03628 CVE-2019-5172 · GHSA-wxw5-4mj8-2m98

OS command injection in WAGO PFC200

Priority LOW 37

An exploitable command injection vulnerability exists in the iocheckd service ‘I/O-Check’ function of the WAGO PFC 200 Firmware version 03.02.02(14).

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.01336 Published 2020-03-11 No fix listed CWE-78
TI-2019-03627 CVE-2019-5171 · GHSA-hvfr-v2x6-hcr4

OS command injection in WAGO PFC200

Priority LOW 37

An exploitable command injection vulnerability exists in the iocheckd service ‘I/O-Check’ function of the WAGO PFC 200 Firmware version 03.02.02(14).

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.01389 Published 2020-03-11 No fix listed CWE-78
TI-2019-03626 CVE-2019-5170 · GHSA-59q2-93ch-m6p9

OS command injection in WAGO PFC200

Priority LOW 37

An exploitable command injection vulnerability exists in the iocheckd service ‘I/O-Check’ function of the WAGO PFC 200 Firmware version 03.02.02(14).

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.01358 Published 2020-03-11 No fix listed CWE-78
TI-2019-03625 CVE-2019-5169 · GHSA-wh3c-22g2-fw2h

OS command injection in WAGO PFC200

Priority LOW 37

An exploitable command injection vulnerability exists in the iocheckd service ‘I/O-Check’ function of the WAGO PFC 200 Firmware version 03.02.02(14).

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.01358 Published 2020-03-11 No fix listed CWE-78
TI-2019-03624 CVE-2019-5168 · GHSA-3q35-r527-69h9

OS command injection in WAGO PFC200 Firmware

Priority LOW 37

An exploitable command injection vulnerability exists in the iocheckd service ‘I/O-Check’ function of the WAGO PFC 200 version 03.02.02(14).

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.01253 Published 2020-03-10 No fix listed CWE-78
TI-2020-04957 CVE-2020-6090 · GHSA-pjg3-ch5q-948j

Insufficient verification of data authenticity in Wago

Priority LOW 36

An exploitable code execution vulnerability exists in the Web-Based Management (WBM) functionality of WAGO PFC 200 03.03.10(15).

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.02056 Published 2020-06-11 No fix listed CWE-345
TI-2019-03640 CVE-2019-5184 · GHSA-rfcj-g83x-pvhm

Double free in Wago

Priority LOW 36

An exploitable double free vulnerability exists in the iocheckd service "I/O-Check" functionality of WAGO PFC 200.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00848 Published 2020-03-23 No fix listed CWE-415
TI-2019-03637 CVE-2019-5181 · GHSA-r2jr-v83g-c59g

Out-of-bounds write in WAGO PFC200

Priority LOW 36

An exploitable stack buffer overflow vulnerability vulnerability exists in the iocheckd service ‘I/O-Check’ functionality of WAGO PFC 200 Firmware version 03.02.02(14).

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00818 Published 2020-03-11 No fix listed CWE-787
TI-2019-03623 CVE-2019-5167 · GHSA-9mfc-vm32-v9f4

OS command injection in WAGO PFC200 Firmware

Priority LOW 36

An exploitable command injection vulnerability exists in the iocheckd service ‘I/O-Check’ function of the WAGO PFC 200 version 03.02.02(14).

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.01206 Published 2020-03-10 No fix listed CWE-78
TI-2019-03622 CVE-2019-5166 · GHSA-w4qg-v526-9gvf

Out-of-bounds write in WAGO PFC200 Firmware

Priority LOW 36

An exploitable stack buffer overflow vulnerability exists in the iocheckd service ‘I/O-Check’ functionality of WAGO PFC 200 version 03.02.02(14).

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00818 Published 2020-03-10 No fix listed CWE-787
Load more
Open these records in search →