WAGO: Vulnerability in web-based authentication in WAGO 750-8XX Version <= FW07
Priority MEDIUM 42CWE-306Published · Updated
Key facts
- Attack vector
- Network
- Privileges required
- None
- User interaction
- None
- Attack complexity
- Low
- Impact type
- Security bypass
- Confidentiality · integrity · availability
- None · High · High
- Fix status
- No fix listed
Attack profile from CVSS 3.1 · NVD. Fix status from CNA. Impact type from CWE-306.
Summary
Improper Authentication vulnerability in WAGO 750-8XX series with FW version <= FW07 allows an attacker to change some special parameters without authentication. This issue affects: WAGO 750-852, WAGO 750-880/xxx-xxx, WAGO 750-881, WAGO 750-831/xxx-xxx, WAGO 750-882, WAGO 750-885/xxx-xxx, WAGO 750-889 in versions FW07 and below.
Why it matters now
EPSS 0.01247 69th percentileScored 2026-11-07
Fix No fix listed No fixed version in the sources yet
SSVC decision points
Not available: CISA has not published SSVC decision points for this record.
Affected products
| Vendor | Product | Affected versions | Fixed in | Status | Source |
|---|---|---|---|---|---|
| WAGO | 750-852 | up to FW07 | — | No fix listed | CNA |
| WAGO | 750-880/xxx-xxx | up to FW07 | — | No fix listed | CNA |
| WAGO | 750-881 | up to FW07 | — | No fix listed | CNA |
| WAGO | 750-831/xxx-xxx | up to FW07 | — | No fix listed | CNA |
| WAGO | 750-882 | up to FW07 | — | No fix listed | CNA |
| WAGO | 750-885/xxx-xxx | up to FW07 | — | No fix listed | CNA |
| WAGO | 750-889 | up to FW07 | — | No fix listed | CNA |
- 750-852 VendorWAGO Affected up to FW07 Fixed in — No fix listed CNA
- 750-880/xxx-xxx VendorWAGO Affected up to FW07 Fixed in — No fix listed CNA
- 750-881 VendorWAGO Affected up to FW07 Fixed in — No fix listed CNA
- 750-831/xxx-xxx VendorWAGO Affected up to FW07 Fixed in — No fix listed CNA
- 750-882 VendorWAGO Affected up to FW07 Fixed in — No fix listed CNA
- 750-885/xxx-xxx VendorWAGO Affected up to FW07 Fixed in — No fix listed CNA
- 750-889 VendorWAGO Affected up to FW07 Fixed in — No fix listed CNA
CPE configurations NVD · 14
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:o:wago:750-852_firmware:*:*:*:*:*:*:*:* | up to fw07 | Vulnerable | WAGO |
| cpe:2.3:h:wago:750-852:-:*:*:*:*:*:*:* | not specified by NVD | Running on | WAGO |
| cpe:2.3:o:wago:750-880_firmware:*:*:*:*:*:*:*:* | up to fw07 | Vulnerable | WAGO |
| cpe:2.3:h:wago:750-880:-:*:*:*:*:*:*:* | not specified by NVD | Running on | WAGO |
| cpe:2.3:o:wago:750-881_firmware:*:*:*:*:*:*:*:* | up to fw07 | Vulnerable | WAGO |
| cpe:2.3:h:wago:750-881:-:*:*:*:*:*:*:* | not specified by NVD | Running on | WAGO |
| cpe:2.3:o:wago:750-831_firmware:*:*:*:*:*:*:*:* | up to fw07 | Vulnerable | WAGO |
| cpe:2.3:h:wago:750-831:-:*:*:*:*:*:*:* | not specified by NVD | Running on | WAGO |
| cpe:2.3:o:wago:750-882_firmware:*:*:*:*:*:*:*:* | up to fw07 | Vulnerable | WAGO |
| cpe:2.3:h:wago:750-882:-:*:*:*:*:*:*:* | not specified by NVD | Running on | WAGO |
- cpe:2.3:o:wago:750-852_firmware:*:*:*:*:*:*:*:* Versions up to fw07 Vulnerable ·WAGO
- cpe:2.3:h:wago:750-852:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·WAGO
- cpe:2.3:o:wago:750-880_firmware:*:*:*:*:*:*:*:* Versions up to fw07 Vulnerable ·WAGO
- cpe:2.3:h:wago:750-880:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·WAGO
- cpe:2.3:o:wago:750-881_firmware:*:*:*:*:*:*:*:* Versions up to fw07 Vulnerable ·WAGO
- cpe:2.3:h:wago:750-881:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·WAGO
- cpe:2.3:o:wago:750-831_firmware:*:*:*:*:*:*:*:* Versions up to fw07 Vulnerable ·WAGO
- cpe:2.3:h:wago:750-831:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·WAGO
- cpe:2.3:o:wago:750-882_firmware:*:*:*:*:*:*:*:* Versions up to fw07 Vulnerable ·WAGO
- cpe:2.3:h:wago:750-882:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·WAGO
Show 4 more CPE
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:o:wago:750-885_firmware:*:*:*:*:*:*:*:* | up to fw07 | Vulnerable | WAGO |
| cpe:2.3:h:wago:750-885:-:*:*:*:*:*:*:* | not specified by NVD | Running on | WAGO |
| cpe:2.3:o:wago:750-889_firmware:*:*:*:*:*:*:*:* | up to fw07 | Vulnerable | WAGO |
| cpe:2.3:h:wago:750-889:-:*:*:*:*:*:*:* | not specified by NVD | Running on | WAGO |
- cpe:2.3:o:wago:750-885_firmware:*:*:*:*:*:*:*:* Versions up to fw07 Vulnerable ·WAGO
- cpe:2.3:h:wago:750-885:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·WAGO
- cpe:2.3:o:wago:750-889_firmware:*:*:*:*:*:*:*:* Versions up to fw07 Vulnerable ·WAGO
- cpe:2.3:h:wago:750-889:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·WAGO
Remediation
No fixed version listed by the sources yet.
Timeline
- 2026-10-02 Threatist record created from CVE-2020-12505
- 2026-10-03 Alias added: GHSA-8wf3-m6g4-jx6p
References
More WAGO 750-831 Firmware vulnerabilities
- TI-2021-13604 CODESYS V2 web server: crafted requests could trigger a null pointer dereference (DoS) CVSS 3.1HIGH 7.5
- TI-2019-07991 The Web-GUI on WAGO Series 750-88x (750-330, 750-352, 750-829, 750-831, 750-852, 750-880… CVSS 3.0CRITICAL 9.8
- TI-2021-10729 CODESYS V2 Web-Server before 1.1.9.20 has Improper Access Control. CVSS 3.1CRITICAL 9.8
- TI-2021-10728 CODESYS V2 Web-Server before 1.1.9.20 has a Stack-based Buffer Overflow. CVSS 3.1CRITICAL 9.8
- TI-2021-10727 CODESYS V2 runtime system SP before 2.4.7.55 has a Stack-based Buffer Overflow. CVSS 3.1CRITICAL 9.8
- TI-2021-13601 CODESYS V2 web server: crafted requests could trigger a heap-based buffer overflow (DoS) CVSS 3.1HIGH 7.5
Sources
- CVE-2020-12505 · CVE Program
- CVE-2020-12505 · NVD
- FIRST EPSS
- GHSA-8wf3-m6g4-jx6p · GitHub Advisory Database · CC BY 4.0
This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences