Wago Pfc200 G2 750-821x-Xxx-Xxx
12 CVEs affecting Wago Pfc200 G2 750-821x-Xxx-Xxx. Latest disclosed: 2025-06-16. Critical: 0, High: 5.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2024-41969 | High | 8.8 | 2024-11-18 | A low privileged remote attacker may modify the configuration of the CODESYS V3 service through a missing authentication vulnerability which could lead to full… |
CVE-2024-41973 | High | 8.1 | 2024-11-18 | A low privileged remote attacker can specify an arbitrary file on the filesystem which may lead to an arbitrary file writes with root privileges. |
CVE-2024-41971 | High | 8.1 | 2024-11-18 | A low privileged remote attacker can overwrite an arbitrary file on the filesystem leading to a DoS and data loss. |
CVE-2024-41967 | High | 8.1 | 2024-11-18 | A low privileged remote attacker may modify the boot mode configuration setup of the device, leading to modification of the firmware upgrade process or a denia… |
CVE-2024-41974 | High | 7.1 | 2024-11-18 | A low privileged remote attacker may modify the BACNet service properties due to incorrect permission assignment for critical resources which may lead to a DoS… |
CVE-2025-25264 | Medium | 6.5 | 2025-06-16 | An unauthenticated remote attacker can trick an admin to visit a website containing malicious java script code. The current overly permissive CORS policy allow… |
CVE-2025-0101 | Medium | 6.5 | 2025-04-16 | A low privileged user can set the date of the devices to the 19th of January 2038 an therefore exceed the 32-Bit time limit. This causes some functions to work… |
CVE-2024-41972 | Medium | 6.5 | 2024-11-18 | A low privileged remote attacker can overwrite an arbitrary file on the filesystem which may lead to an arbitrary file read with root privileges. |
CVE-2024-41970 | Medium | 5.7 | 2024-11-18 | A low privileged remote attacker may gain access to forbidden diagnostic data due to incorrect permission assignment for critical resources. |
CVE-2024-12650 | Medium | 5.4 | 2025-03-05 | An attacker with low privileges can manipulate the requested memory size, causing the application to use an invalid memory area. This could lead to a crash of… |
CVE-2024-41968 | Medium | 5.4 | 2024-11-18 | A low privileged remote attacker may modify the docker settings setup of the device, leading to a limited DoS. |
CVE-2025-25265 | Medium | 4.9 | 2025-06-16 | A web application for configuring the controller is accessible at a specific path. It contains an endpoint that allows a high privileged remote attacker to rea… |