wago Vulnerability Advisory Catalog

Total 110 security vulnerabilities recorded for wago software and firmware.

← Back to All Vendors
CVE-2019-12550 CRITICAL
Component: 852-303_firmware

WAGO 852-303 before FW06, 852-1305 before FW06, and 852-1505 before FW03 devices contain hardcoded users and passwords that can be used to login via S...

📅 2019-06-17
CVSS 9.8 Dossier →
CVE-2019-12549 CRITICAL
Component: 852-303_firmware

WAGO 852-303 before FW06, 852-1305 before FW06, and 852-1505 before FW03 devices contain hardcoded private keys for the SSH daemon. The fingerprint of...

📅 2019-06-17
CVSS 9.8 Dossier →
CVE-2019-10712 CRITICAL
Component: 750-830_firmware

The Web-GUI on WAGO Series 750-88x (750-330, 750-352, 750-829, 750-831, 750-852, 750-880, 750-881, 750-882, 750-884, 750-885, 750-889) and Series 750-...

📅 2019-05-07
CVSS 9.8 Dossier →
CVE-2018-16210 MEDIUM
Component: 750-362_firmware

WAGO 750-88X and WAGO 750-89X Ethernet Controller devices, versions 01.09.18(13) and before, have XSS in the SNMP configuration via the webserv/cplcfg...

📅 2018-10-12
CVSS 6.1 Dossier →
CVE-2018-12981 MEDIUM
Component: 762-3000_firmware

An issue was discovered on WAGO e!DISPLAY 762-3000 through 762-3003 devices with firmware before FW 02. The vulnerability can be exploited by authenti...

📅 2018-07-12
CVSS 5.4 Dossier →
CVE-2018-12980 HIGH
Component: 762-3000_firmware

An issue was discovered on WAGO e!DISPLAY 762-3000 through 762-3003 devices with firmware before FW 02. The vulnerability allows an authenticated user...

📅 2018-07-12
CVSS 8.8 Dossier →
CVE-2018-12979 MEDIUM
Component: 762-3000_firmware

An issue was discovered on WAGO e!DISPLAY 762-3000 through 762-3003 devices with firmware before FW 02. Weak permissions allow an authenticated user t...

📅 2018-07-12
CVSS 6.5 Dossier →
CVE-2018-8836 MEDIUM
Component: 750-880_firmware

Wago 750 Series PLCs with firmware version 10 and prior include a remote attack may take advantage of an improper implementation of the 3 way handshak...

📅 2018-04-03
CVSS 5.3 Dossier →
CVE-2018-5459 CRITICAL
Component: pfc200_firmware

An Improper Authentication issue was discovered in WAGO PFC200 Series 3S CoDeSys Runtime versions 2.3.X and 2.4.X. An attacker can execute different u...

📅 2018-02-13
CVSS 9.8 Dossier →
CVE-2015-6473 CRITICAL
Component: 750-849_firmware

WAGO IO 750-849 01.01.27 and WAGO IO 750-881 01.02.05 do not contain privilege separation....

📅 2017-08-22
CVSS 9.8 Dossier →
CVE-2015-6472 CRITICAL
Component: 750-849_firmware

WAGO IO 750-849 01.01.27 and 01.02.05, WAGO IO 750-881, and WAGO IO 758-870 have weak credential management....

📅 2017-08-22
CVSS 9.8 Dossier →
CVE-2016-9362 CRITICAL
Component: pfc200_firmware

An issue was discovered in WAGO 750-8202/PFC200 prior to FW04 (released August 2015), WAGO 750-881 prior to FW09 (released August 2016), and WAGO 0758...

📅 2017-02-13
CVSS 9.1 Dossier →
CVE-2012-4879 UNKNOWN
Component: wago_i\/o_system_758_industrial_pc_device

The Linux Console on the WAGO I/O System 758 model 758-870, 758-874, 758-875, and 758-876 Industrial PC (IPC) devices has a default password of wago f...

📅 2012-09-07
CVSS 10.0 Dossier →
CVE-2012-3013 UNKNOWN
Component: wago_i\/o_system_758_industrial_pc_device

WAGO I/O System 758 model 758-870, 758-874, 758-875, and 758-876 Industrial PC (IPC) devices have default passwords for unspecified Web Based Manageme...

📅 2012-09-07
CVSS 10.0 Dossier →
Page 5 of 5 (110 Total Records)
← Previous Page