Read the docs

WAGO

Records146All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical50CVSS 9.0–10.0
CVSS high61CVSS 7.0–8.9

Exploited now

WAGO records in CISA KEV

No WAGO vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Pfc200 Firmware 40 records CRITICAL 750-8202 Firmware 27 records MEDIUM 750-881 Firmware 27 records MEDIUM 750-831 Firmware 26 records MEDIUM 750-880 Firmware 26 records MEDIUM 750-889 Firmware 26 records MEDIUM 750-852 Firmware 25 records MEDIUM 750-823 Firmware 24 records MEDIUM

Records

9 records in Pfc 100 Firmware · all components

TI-2019-03542 CVE-2019-5081 · GHSA-v636-46xh-j279

Out-of-bounds write in WAGO PFC200

Priority MEDIUM 49

An exploitable heap buffer overflow vulnerability exists in the iocheckd service ''I/O-Chec'' functionality of WAGO PFC 200 Firmware version 03.01.07(13) and 03.00.39(12), and WAGO PFC100 Firmware version 03.00.39(12).

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.04521 Published 2019-12-18 No fix listed CWE-787
TI-2019-03536 CVE-2019-5075 · GHSA-8c7x-5xg2-cr7x

Out-of-bounds write in WAGO PFC200

Priority MEDIUM 49

An exploitable stack buffer overflow vulnerability exists in the command line utility getcouplerdetails of WAGO PFC200 Firmware versions 03.01.07(13) and 03.00.39(12), and WAGO PFC100 Firmware version 03.00.39(12).

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.03866 Published 2019-12-18 No fix listed CWE-787
TI-2020-10015 CVE-2020-12522 · GHSA-qrrv-9vc8-gf2w

OS command injection in WAGO Series PFC 100

Priority MEDIUM 48

The reported vulnerability allows an attacker who has network access to the device to execute code with specially crafted packets in WAGO Series PFC 100 (750-81xx/xxx-xxx), Series PFC 200 (750-82xx/xxx-xxx), Series Wago…

CVSS 3.1CRITICAL 10.0 Network No auth No interaction EPSS 0.03054 Published 2020-12-17 No fix listed CWE-78
TI-2019-03540 CVE-2019-5079 · GHSA-69j7-ff29-gmc8

Out-of-bounds write in WAGO PFC200

Priority MEDIUM 48

An exploitable heap buffer overflow vulnerability exists in the iocheckd service "I/O-Check" functionality of WAGO PFC200 Firmware versions 03.01.07(13) and 03.00.39(12), and WAGO PFC100 Firmware version 03.00.39(12).

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.03316 Published 2019-12-18 No fix listed CWE-787
TI-2019-03535 CVE-2019-5074 · GHSA-cc6m-vg7g-249c

Out-of-bounds write in WAGO PFC200

Priority MEDIUM 48

An exploitable stack buffer overflow vulnerability exists in the iocheckd service ''I/O-Check'' functionality of WAGO PFC200 Firmware version 03.01.07(13), WAGO PFC200 Firmware version 03.00.39(12) and WAGO PFC100 Firmwa…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.0328 Published 2019-12-18 No fix listed CWE-787
TI-2019-03541 CVE-2019-5080 · GHSA-753h-jhp3-85mr

Missing authentication in WAGO PFC200

Priority MEDIUM 43

An exploitable denial-of-service vulnerability exists in the iocheckd service "I/O-Check" functionality of WAGO PFC 200 Firmware versions 03.01.07(13) and 03.00.39(12), and WAGO PFC100 Firmware version 03.00.39(12).

CVSS 3.1CRITICAL 9.1 Network No auth No interaction EPSS 0.01866 Published 2019-12-18 No fix listed CWE-306
TI-2019-03539 CVE-2019-5078 · GHSA-hjp3-mgv4-cwvx

Missing authentication in WAGO PFC200

Priority MEDIUM 43

An exploitable denial of service vulnerability exists in the iocheckd service "I/O-Check" functionality of WAGO PFC200 Firmware versions 03.01.07(13) and 03.00.39(12), and WAGO PFC100 Firmware version 03.00.39(12).

CVSS 3.1CRITICAL 9.1 Network No auth No interaction EPSS 0.01655 Published 2019-12-18 No fix listed CWE-306
TI-2019-03538 CVE-2019-5077 · GHSA-wg4r-4x32-rpwp

Missing authentication in WAGO PFC200

Priority MEDIUM 43

An exploitable denial-of-service vulnerability exists in the iocheckd service ‘’I/O-Chec’’ functionality of WAGO PFC 200 Firmware versions 03.01.07(13) and 03.00.39(12), and WAGO PFC 100 Firmware version 03.00.39(12).

CVSS 3.1CRITICAL 9.1 Network No auth No interaction EPSS 0.01643 Published 2019-12-18 No fix listed CWE-306
TI-2019-03534 CVE-2019-5073 · GHSA-6853-r3p7-f8fv

Information disclosure in WAGO PFC200

Priority LOW 27

An exploitable information exposure vulnerability exists in the iocheckd service "I/O-Check" functionality of WAGO PFC200 Firmware versions 03.01.07(13) and 03.00.39(12), and WAGO PFC100 Firmware version 03.00.39(12).

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.01621 Published 2019-12-18 No fix listed CWE-200
Open these records in search →