What is CVE-2020-12522?

CVE-2020-12522 is a critical-severity vulnerability in Wago 750-8101\/025-000, classified under OS Command Injection. CVSS score: 10.0/10. Published 2020-12-17.

How severe is CVE-2020-12522?

Critical severity. CVSS v3 base score is 10.0 out of 10.

RCE in Wago 750-8101\/025-000

CVE-2020-12522

The reported vulnerability allows an attacker who has network access to the device to execute code with specially crafted packets in WAGO Series PFC 100 (750-81xx/xxx-xxx), Series PFC 200 (750-82xx/xxx-xxx), Series Wago Touch Panel 600 Sta…

Vulnerability class: Command Injection (OS Command Injection)

EPSS: 0.029 (85.3th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 10.0 (Critical). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H.

Affected products

Wago 750-8101\/025-000
Wago 750-8102\/025-000
Wago 750-8202\/000-012
Wago 750-8202\/000-022
Wago 750-8202\/040-000
Wago 750-8202\/040-001
Wago 750-8206\/025-000
Wago 750-8206\/025-001
Wago 750-8206\/040-000
Wago 750-8206\/040-001

Weakness classification (CWE)

CWE-78 — OS Command Injection

References

info@cert.vde.com (x_refsource_CONFIRM, Third Party Advisory)

Frequently asked questions

What is CVE-2020-12522?: CVE-2020-12522 is a critical-severity vulnerability in Wago 750-8101\/025-000, classified under OS Command Injection. CVSS score: 10.0/10. Published 2020-12-17.
How severe is CVE-2020-12522?: Critical severity. CVSS v3 base score is 10.0 out of 10.