Wago 750-890 Firmware vulnerabilities

23 known vulnerabilities affecting wago/750-890_firmware.

Total CVEs

23

CISA KEV

0

Public exploits

0

Exploited in wild

0

Severity breakdown

CRITICAL8HIGH9MEDIUM6

Vulnerabilities

Page 2 of 2

CVE-2021-21001MEDIUMCVSS 6.5fixed in fw082021-05-24

CVE-2021-21001 [CRITICAL] CWE-22 CVE-2021-21001: On WAGO PFC200 devices in different firmware versions with special crafted packets an authorised att On WAGO PFC200 devices in different firmware versions with special crafted packets an authorised attacker with network access to the device can access the file system with higher privileges.

CVE-2020-12506CRITICALCVSS 9.1≤ fw032020-09-30

CVE-2020-12506 [CRITICAL] CWE-306 CVE-2020-12506: Improper Authentication vulnerability in WAGO 750-8XX series with FW version <= FW03 allows an attac Improper Authentication vulnerability in WAGO 750-8XX series with FW version <= FW03 allows an attacker to change the settings of the devices by sending specifically constructed requests without authentication This issue affects: WAGO 750-362, WAGO 750-363, WAGO 750-823, WAGO 750-832/xxx-xxx, WAGO 750-862, WAGO 750-891, WAGO 750-890/xxx-xxx in ver

CVE-2018-16210MEDIUMCVSS 6.1fixed in 052018-10-12

CVE-2018-16210 [MEDIUM] CWE-79 CVE-2018-16210: WAGO 750-88X and WAGO 750-89X Ethernet Controller devices, versions 01.09.18(13) and before, have XS WAGO 750-88X and WAGO 750-89X Ethernet Controller devices, versions 01.09.18(13) and before, have XSS in the SNMP configuration via the webserv/cplcfg/snmp.ssi SNMP_DESC or SNMP_LOC_SNMP_CONT field.

← Previous2 / 2