Wago
Page 2 of 2 — Wago CVEs from a corpus of 145, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2019-5175 | High | 7.8 | 2020-03-11 | An exploitable command injection vulnerability exists in the iocheckd service ‘I/O-Check’ function of the WAGO PFC 200 Firmware version 03.02.02(14). A special… |
CVE-2019-5174 | High | 7.8 | 2020-03-11 | An exploitable command injection vulnerability exists in the iocheckd service ‘I/O-Check’ function of the WAGO PFC 200 version 03.02.02(14). A specially crafte… |
CVE-2019-5173 | High | 7.8 | 2020-03-11 | An exploitable command injection vulnerability exists in the iocheckd service ‘I/O-Check’ function of the WAGO PFC 200 Firmware version 03.02.02(14). A special… |
CVE-2019-5172 | High | 7.8 | 2020-03-11 | An exploitable command injection vulnerability exists in the iocheckd service ‘I/O-Check’ function of the WAGO PFC 200 Firmware version 03.02.02(14). An attack… |
CVE-2019-5168 | High | 7.8 | 2020-03-11 | An exploitable command injection vulnerability exists in the iocheckd service ‘I/O-Check’ function of the WAGO PFC 200 version 03.02.02(14). An attacker can se… |
CVE-2019-5167 | High | 7.8 | 2020-03-11 | An exploitable command injection vulnerability exists in the iocheckd service ‘I/O-Check’ function of the WAGO PFC 200 version 03.02.02(14). At 0x1e3f0 the ext… |
CVE-2019-5166 | High | 7.8 | 2020-03-11 | An exploitable stack buffer overflow vulnerability exists in the iocheckd service ‘I/O-Check’ functionality of WAGO PFC 200 version 03.02.02(14). A specially c… |
CVE-2019-5161 | Critical | 9.1 | 2020-03-11 | An exploitable remote code execution vulnerability exists in the Cloud Connectivity functionality of WAGO PFC200 versions 03.02.02(14), 03.01.07(13), and 03.00… |
CVE-2019-5160 | Critical | 9.1 | 2020-03-11 | An exploitable improper host validation vulnerability exists in the Cloud Connectivity functionality of WAGO PFC200 Firmware versions 03.02.02(14), 03.01.07(13… |
CVE-2019-5159 | High | 7.8 | 2020-03-11 | An exploitable improper input validation vulnerability exists in the firmware update functionality of WAGO e!COCKPIT automation software v1.6.0.7. A specially… |
CVE-2019-5158 | High | 7.8 | 2020-03-11 | An exploitable firmware downgrade vulnerability exists in the firmware update package functionality of the WAGO e!COCKPIT automation software v1.6.1.5. A speci… |
CVE-2019-5157 | High | 7.2 | 2020-03-11 | An exploitable command injection vulnerability exists in the Cloud Connectivity functionality of WAGO PFC200 Firmware versions 03.02.02(14), 03.01.07(13), and… |
CVE-2019-5156 | High | 7.2 | 2020-03-11 | An exploitable command injection vulnerability exists in the cloud connectivity functionality of WAGO PFC200 versions 03.02.02(14), 03.01.07(13), and 03.00.39(… |
CVE-2019-5155 | High | 7.2 | 2020-03-11 | An exploitable command injection vulnerability exists in the cloud connectivity feature of WAGO PFC200. An attacker can inject operating system commands into a… |
CVE-2019-5149 | High | 7.5 | 2020-03-11 | The WBM web application on firmwares prior to 03.02.02 and 03.01.07 on the WAGO PFC100 and PFC2000, respectively, runs on a lighttpd web server and makes use o… |
CVE-2019-5135 | Medium | 5.3 | 2020-03-11 | An exploitable timing discrepancy vulnerability exists in the authentication functionality of the Web-Based Management (WBM) web application on WAGO PFC100/200… |
CVE-2019-5134 | High | 7.5 | 2020-03-11 | An exploitable regular expression without anchors vulnerability exists in the Web-Based Management (WBM) authentication functionality of WAGO PFC200 versions 0… |
CVE-2019-5107 | High | 7.5 | 2020-03-11 | A cleartext transmission vulnerability exists in the network communication functionality of WAGO e!Cockpit version 1.5.1.1. An attacker with access to network… |
CVE-2019-5106 | Medium | 5.5 | 2020-03-11 | A hard-coded encryption key vulnerability exists in the authentication functionality of WAGO e!Cockpit version 1.5.1.1. An attacker with access to communicatio… |
CVE-2020-8597 | Critical | 9.8 | 2020-02-03 | eap.c in pppd in ppp 2.4.2 through 2.4.8 has an rhostname buffer overflow in the eap_request and eap_response functions. |
CVE-2019-5082 | Critical | 9.8 | 2020-01-08 | An exploitable heap buffer overflow vulnerability exists in the iocheckd service I/O-Check functionality of WAGO PFC200 Firmware version 03.01.07(13), WAGO PFC… |
CVE-2019-5080 | Critical | 9.1 | 2019-12-18 | An exploitable denial-of-service vulnerability exists in the iocheckd service "I/O-Check" functionality of WAGO PFC 200 Firmware versions 03.01.07(13) and 03.0… |
CVE-2019-5079 | Critical | 9.8 | 2019-12-18 | An exploitable heap buffer overflow vulnerability exists in the iocheckd service "I/O-Check" functionality of WAGO PFC200 Firmware versions 03.01.07(13) and 03… |
CVE-2019-5078 | Critical | 9.1 | 2019-12-18 | An exploitable denial of service vulnerability exists in the iocheckd service "I/O-Check" functionality of WAGO PFC200 Firmware versions 03.01.07(13) and 03.00… |
CVE-2019-5075 | Critical | 9.8 | 2019-12-18 | An exploitable stack buffer overflow vulnerability exists in the command line utility getcouplerdetails of WAGO PFC200 Firmware versions 03.01.07(13) and 03.00… |
CVE-2019-5073 | Medium | 5.3 | 2019-12-18 | An exploitable information exposure vulnerability exists in the iocheckd service "I/O-Check" functionality of WAGO PFC200 Firmware versions 03.01.07(13) and 03… |
CVE-2019-5081 | Critical | 9.8 | 2019-12-18 | An exploitable heap buffer overflow vulnerability exists in the iocheckd service ''I/O-Chec'' functionality of WAGO PFC 200 Firmware version 03.01.07(13) and 0… |
CVE-2019-5077 | Critical | 9.1 | 2019-12-18 | An exploitable denial-of-service vulnerability exists in the iocheckd service ‘’I/O-Chec’’ functionality of WAGO PFC 200 Firmware versions 03.01.07(13) and 03… |
CVE-2019-5074 | Critical | 9.8 | 2019-12-18 | An exploitable stack buffer overflow vulnerability exists in the iocheckd service ''I/O-Check'' functionality of WAGO PFC200 Firmware version 03.01.07(13), WAG… |
CVE-2019-18202 | Medium | 5.3 | 2019-10-19 | Information Disclosure is possible on WAGO Series PFC100 and PFC200 devices before FW12 due to improper access control. A remote attacker can check for the exi… |
CVE-2019-12550 | Critical | 9.8 | 2019-06-17 | WAGO 852-303 before FW06, 852-1305 before FW06, and 852-1505 before FW03 devices contain hardcoded users and passwords that can be used to login via SSH and TE… |
CVE-2019-12549 | Critical | 9.8 | 2019-06-17 | WAGO 852-303 before FW06, 852-1305 before FW06, and 852-1505 before FW03 devices contain hardcoded private keys for the SSH daemon. The fingerprint of the SSH… |
CVE-2019-10712 | Critical | 9.8 | 2019-05-07 | The Web-GUI on WAGO Series 750-88x (750-330, 750-352, 750-829, 750-831, 750-852, 750-880, 750-881, 750-882, 750-884, 750-885, 750-889) and Series 750-87x (750-… |
CVE-2019-10953 | High | 7.5 | 2019-04-17 | ABB, Phoenix Contact, Schneider Electric, Siemens, WAGO - Programmable Logic Controllers, multiple versions. Researchers have found some controllers are suscep… |
CVE-2018-16210 | Medium | 6.1 | 2018-10-12 | WAGO 750-88X and WAGO 750-89X Ethernet Controller devices, versions 01.09.18(13) and before, have XSS in the SNMP configuration via the webserv/cplcfg/snmp.ssi… |
CVE-2018-12981 | Medium | 5.4 | 2018-07-12 | An issue was discovered on WAGO e!DISPLAY 762-3000 through 762-3003 devices with firmware before FW 02. The vulnerability can be exploited by authenticated and… |
CVE-2018-12980 | High | 8.8 | 2018-07-12 | An issue was discovered on WAGO e!DISPLAY 762-3000 through 762-3003 devices with firmware before FW 02. The vulnerability allows an authenticated user to uploa… |
CVE-2018-12979 | Medium | 6.5 | 2018-07-12 | An issue was discovered on WAGO e!DISPLAY 762-3000 through 762-3003 devices with firmware before FW 02. Weak permissions allow an authenticated user to overwri… |
CVE-2018-8836 | Medium | 5.3 | 2018-04-03 | Wago 750 Series PLCs with firmware version 10 and prior include a remote attack may take advantage of an improper implementation of the 3 way handshake during… |
CVE-2018-5459 | Critical | 9.8 | 2018-02-13 | An Improper Authentication issue was discovered in WAGO PFC200 Series 3S CoDeSys Runtime versions 2.3.X and 2.4.X. An attacker can execute different unauthenti… |
CVE-2015-6473 | Critical | 9.8 | 2017-08-22 | WAGO IO 750-849 01.01.27 and WAGO IO 750-881 01.02.05 do not contain privilege separation. |
CVE-2015-6472 | Critical | 9.8 | 2017-08-22 | WAGO IO 750-849 01.01.27 and 01.02.05, WAGO IO 750-881, and WAGO IO 758-870 have weak credential management. |
CVE-2016-9362 | Critical | 9.1 | 2017-02-13 | An issue was discovered in WAGO 750-8202/PFC200 prior to FW04 (released August 2015), WAGO 750-881 prior to FW09 (released August 2016), and WAGO 0758-0874-000… |
CVE-2012-4879 | | 2012-09-07 | The Linux Console on the WAGO I/O System 758 model 758-870, 758-874, 758-875, and 758-876 Industrial PC (IPC) devices has a default password of wago for the (1… | |
CVE-2012-3013 | | 2012-09-07 | WAGO I/O System 758 model 758-870, 758-874, 758-875, and 758-876 Industrial PC (IPC) devices have default passwords for unspecified Web Based Management accoun… |