WAGO: Authentication Bypass Vulnerability in WAGO 750-36X and WAGO 750-8XX Versions <= FW03
Priority MEDIUM 42CWE-306Published · Updated
Key facts
- Attack vector
- Network
- Privileges required
- None
- User interaction
- None
- Attack complexity
- Low
- Impact type
- Security bypass
- Confidentiality · integrity · availability
- None · High · High
- Fix status
- No fix listed
Attack profile from CVSS 3.1 · CNA. Fix status from CNA. Impact type from CWE-306.
Summary
Improper Authentication vulnerability in WAGO 750-8XX series with FW version <= FW03 allows an attacker to change the settings of the devices by sending specifically constructed requests without authentication This issue affects: WAGO 750-362, WAGO 750-363, WAGO 750-823, WAGO 750-832/xxx-xxx, WAGO 750-862, WAGO 750-891, WAGO 750-890/xxx-xxx in versions FW03 and prior versions.
Why it matters now
EPSS 0.01452 73rd percentileScored 2026-11-07
Fix No fix listed No fixed version in the sources yet
SSVC decision points
Not available: CISA has not published SSVC decision points for this record.
Affected products
| Vendor | Product | Affected versions | Fixed in | Status | Source |
|---|---|---|---|---|---|
| WAGO | 750-362 | up to FW03 | — | No fix listed | CNA |
| WAGO | 750-363 | up to FW03 | — | No fix listed | CNA |
| WAGO | 750-823 | up to FW03 | — | No fix listed | CNA |
| WAGO | 750-832/xxx-xxx | up to FW03 | — | No fix listed | CNA |
| WAGO | 750-862 | up to FW03 | — | No fix listed | CNA |
| WAGO | 750-891 | up to FW03 | — | No fix listed | CNA |
| WAGO | 750-890/xxx-xxx | up to FW03 | — | No fix listed | CNA |
- 750-362 VendorWAGO Affected up to FW03 Fixed in — No fix listed CNA
- 750-363 VendorWAGO Affected up to FW03 Fixed in — No fix listed CNA
- 750-823 VendorWAGO Affected up to FW03 Fixed in — No fix listed CNA
- 750-832/xxx-xxx VendorWAGO Affected up to FW03 Fixed in — No fix listed CNA
- 750-862 VendorWAGO Affected up to FW03 Fixed in — No fix listed CNA
- 750-891 VendorWAGO Affected up to FW03 Fixed in — No fix listed CNA
- 750-890/xxx-xxx VendorWAGO Affected up to FW03 Fixed in — No fix listed CNA
CPE configurations NVD · 14
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:o:wago:750-362_firmware:*:*:*:*:*:*:*:* | up to fw03 | Vulnerable | WAGO |
| cpe:2.3:h:wago:750-362:-:*:*:*:*:*:*:* | not specified by NVD | Running on | WAGO |
| cpe:2.3:o:wago:750-363_firmware:*:*:*:*:*:*:*:* | up to fw03 | Vulnerable | WAGO |
| cpe:2.3:h:wago:750-363:-:*:*:*:*:*:*:* | not specified by NVD | Running on | WAGO |
| cpe:2.3:o:wago:750-823_firmware:*:*:*:*:*:*:*:* | up to fw03 | Vulnerable | WAGO |
| cpe:2.3:h:wago:750-823:-:*:*:*:*:*:*:* | not specified by NVD | Running on | WAGO |
| cpe:2.3:o:wago:750-832_firmware:*:*:*:*:*:*:*:* | up to fw03 | Vulnerable | WAGO |
| cpe:2.3:h:wago:750-832:-:*:*:*:*:*:*:* | not specified by NVD | Running on | WAGO |
| cpe:2.3:o:wago:750-862_firmware:*:*:*:*:*:*:*:* | up to fw03 | Vulnerable | WAGO |
| cpe:2.3:h:wago:750-862:-:*:*:*:*:*:*:* | not specified by NVD | Running on | WAGO |
- cpe:2.3:o:wago:750-362_firmware:*:*:*:*:*:*:*:* Versions up to fw03 Vulnerable ·WAGO
- cpe:2.3:h:wago:750-362:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·WAGO
- cpe:2.3:o:wago:750-363_firmware:*:*:*:*:*:*:*:* Versions up to fw03 Vulnerable ·WAGO
- cpe:2.3:h:wago:750-363:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·WAGO
- cpe:2.3:o:wago:750-823_firmware:*:*:*:*:*:*:*:* Versions up to fw03 Vulnerable ·WAGO
- cpe:2.3:h:wago:750-823:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·WAGO
- cpe:2.3:o:wago:750-832_firmware:*:*:*:*:*:*:*:* Versions up to fw03 Vulnerable ·WAGO
- cpe:2.3:h:wago:750-832:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·WAGO
- cpe:2.3:o:wago:750-862_firmware:*:*:*:*:*:*:*:* Versions up to fw03 Vulnerable ·WAGO
- cpe:2.3:h:wago:750-862:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·WAGO
Show 4 more CPE
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:o:wago:750-891_firmware:*:*:*:*:*:*:*:* | up to fw03 | Vulnerable | WAGO |
| cpe:2.3:h:wago:750-891:-:*:*:*:*:*:*:* | not specified by NVD | Running on | WAGO |
| cpe:2.3:o:wago:750-890_firmware:*:*:*:*:*:*:*:* | up to fw03 | Vulnerable | WAGO |
| cpe:2.3:h:wago:750-890:-:*:*:*:*:*:*:* | not specified by NVD | Running on | WAGO |
- cpe:2.3:o:wago:750-891_firmware:*:*:*:*:*:*:*:* Versions up to fw03 Vulnerable ·WAGO
- cpe:2.3:h:wago:750-891:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·WAGO
- cpe:2.3:o:wago:750-890_firmware:*:*:*:*:*:*:*:* Versions up to fw03 Vulnerable ·WAGO
- cpe:2.3:h:wago:750-890:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·WAGO
Remediation
No fixed version listed by the sources yet.
Timeline
- 2026-10-02 Threatist record created from CVE-2020-12506
- 2026-10-03 Alias added: GHSA-8c2w-ph9m-jcmf
References
More WAGO 750-362 Firmware vulnerabilities
- TI-2021-13596 WAGO: Authentication Vulnerability in Web-Based Management CVSS 3.1CRITICAL 9.8
- TI-2023-01088 WAGO: Series 750-3x/-8x prone to MODBUS server DoS CVSS 3.1HIGH 7.5
- TI-2018-11605 WAGO 750-88X and WAGO 750-89X Ethernet Controller devices, versions 01.09.18(13) and… CVSS 3.1MEDIUM 6.1
Sources
- CVE-2020-12506 · CVE Program
- CVE-2020-12506 · NVD
- FIRST EPSS
- GHSA-8c2w-ph9m-jcmf · GitHub Advisory Database · CC BY 4.0
This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences