Browse CVEs

CRITICAL 9.8 CVE-2021-30190 CODESYS V2 Web-Server before 1.1.9.20 has Improper Access Control. 750 893 Firmware Mitigation only Fix from $2,3002021-05-25 CRITICAL 9.8 CVE-2021-30192 CODESYS V2 Web-Server before 1.1.9.20 has an Improperly Implemented Security Check. 750 893 Firmware No fix yet Fix from $2,3002021-05-25 CRITICAL 9.8 CVE-2021-30193 CODESYS V2 Web-Server before 1.1.9.20 has an Out-of-bounds Write. 750 893 Firmware Mitigation only Fix from $2,3002021-05-25 CRITICAL 9.1 CVE-2021-30194 CODESYS V2 Web-Server before 1.1.9.20 has an Out-of-bounds Read. 750 893 Firmware Mitigation only Fix from $2,3002021-05-25 HIGH 7.5 CVE-2021-30186EPSS 7% CODESYS V2 runtime system SP before 2.4.7.55 has a Heap-based Buffer Overflow. 750 893 Firmware Mitigation only Fix from $1,9502021-05-25 HIGH 7.5 CVE-2021-30191 CODESYS V2 Web-Server before 1.1.9.20 has a a Buffer Copy without Checking the Size of the Input. 750 893 Firmware Mitigation only Fix from $1,9502021-05-25 HIGH 7.5 CVE-2021-30195EPSS 7% CODESYS V2 runtime system before 2.4.7.55 has Improper Input Validation. 750 893 Firmware Mitigation only Fix from $1,9502021-05-25 MEDIUM 5.3 CVE-2021-30187 CODESYS V2 runtime system SP before 2.4.7.55 has Improper Neutralization of Special Elements used in an OS Command. 750 893 Firmware Mitigation only Fix from $1,6002021-05-25 HIGH 7.5 CVE-2021-21000 On WAGO PFC200 devices in different firmware versions with special crafted packets an attacker with network access to the device could cause a denial… 750 823 Firmware Mitigation only Fix from $1,9502021-05-24 MEDIUM 6.5 CVE-2021-21001 On WAGO PFC200 devices in different firmware versions with special crafted packets an authorised attacker with network access to the device can acces… 750 823 Firmware Mitigation only Fix from $1,6002021-05-24 CRITICAL 9.8 CVE-2021-20998 In multiple managed switches by WAGO in different versions without authorization and with specially crafted packets it is possible to create users. 0852 0303 Firmware after 1.2.3.s0 Fix from $2,3002021-05-13 HIGH 7.5 CVE-2021-20995 In multiple managed switches by WAGO in different versions the webserver cookies of the web based UI contain user credentials. 0852 0303 Firmware after 1.2.3.s0 Fix from $1,9502021-05-13 HIGH 7.5 CVE-2021-20997 In multiple managed switches by WAGO in different versions it is possible to read out the password hashes of all Web-based Management users. 0852 0303 Firmware after 1.2.3.s0 Fix from $1,9502021-05-13 MEDIUM 5.3 CVE-2021-20996 In multiple managed switches by WAGO in different versions special crafted requests can lead to cookies being transferred to third parties. 0852 0303 Firmware after 1.2.3.s0 Fix from $1,6002021-05-13 MEDIUM 6.1 CVE-2021-20994 In multiple managed switches by WAGO in different versions an attacker may trick a legitimate user to click a link to inject possible malicious code … 0852 0303 Firmware after 1.2.3.s0 Fix from $1,6002021-05-13 MEDIUM 5.3 CVE-2021-20993 In multiple managed switches by WAGO in different versions the activated directory listing provides an attacker with the index of the resources locat… 0852 0303 Firmware after 1.2.3.s0 Fix from $1,6002021-05-13 CRITICAL 9.8 CVE-2020-12522 The reported vulnerability allows an attacker who has network access to the device to execute code with specially crafted packets in WAGO Series PFC … Pfc 100 Firmware after 10 Fix from $2,3002020-12-17 HIGH 7.5 CVE-2020-12516 Older firmware versions (FW1 up to FW10) of the WAGO PLC family 750-88x and 750-352 are vulnerable for a special denial of service attack. 750 352 Firmware Patch available Fix from $1,9502020-12-10 CRITICAL 9.1 CVE-2020-12506 Improper Authentication vulnerability in WAGO 750-8XX series with FW version <= FW03 allows an attacker to change the settings of the devices by send… 750 362 Firmware Mitigation only Fix from $2,3002020-09-30 HIGH 8.2 CVE-2020-12505 Improper Authentication vulnerability in WAGO 750-8XX series with FW version <= FW07 allows an attacker to change some special parameters without aut… 750 852 Firmware Mitigation only Fix from $1,9502020-09-30 HIGH 7.2 CVE-2020-6090 An exploitable code execution vulnerability exists in the Web-Based Management (WBM) functionality of WAGO PFC 200 03.03.10(15). A specially crafted … Pfc200 Firmware Mitigation only Fix from $1,9502020-06-11 HIGH 7.8 CVE-2019-5184 An exploitable double free vulnerability exists in the iocheckd service "I/O-Check" functionality of WAGO PFC 200. A specially crafted XML cache file… Pfc200 Firmware No fix yet Fix from $1,9502020-03-23 HIGH 7.0 CVE-2019-5185 An exploitable stack buffer overflow vulnerability vulnerability exists in the iocheckd service "I/O-Check" functionality of WAGO PFC 200. An attacke… Pfc200 Firmware No fix yet Fix from $1,9502020-03-23 HIGH 7.0 CVE-2019-5186 An exploitable stack buffer overflow vulnerability vulnerability exists in the iocheckd service "I/O-Check" functionality of WAGO PFC 200. An attacke… Pfc200 Firmware No fix yet Fix from $1,9502020-03-23 HIGH 7.8 CVE-2019-5170 An exploitable command injection vulnerability exists in the iocheckd service ‘I/O-Check’ function of the WAGO PFC 200 Firmware version 03.02.02(14).… Pfc200 Firmware No fix yet Fix from $1,9502020-03-12 HIGH 7.8 CVE-2019-5171 An exploitable command injection vulnerability exists in the iocheckd service ‘I/O-Check’ function of the WAGO PFC 200 Firmware version 03.02.02(14).… Pfc200 Firmware No fix yet Fix from $1,9502020-03-12 HIGH 7.8 CVE-2019-5178 An exploitable stack buffer overflow vulnerability vulnerability exists in the iocheckd service ‘I/O-Check’ functionality of WAGO PFC 200 Firmware ve… Pfc200 Firmware No fix yet Fix from $1,9502020-03-12 HIGH 7.8 CVE-2019-5179 An exploitable stack buffer overflow vulnerability vulnerability exists in the iocheckd service ‘I/O-Check’ functionality of WAGO PFC 200 Firmware ve… Pfc200 Firmware No fix yet Fix from $1,9502020-03-12 HIGH 7.8 CVE-2019-5180 An exploitable stack buffer overflow vulnerability vulnerability exists in the iocheckd service ‘I/O-Check’ functionality of WAGO PFC 200 Firmware ve… Pfc200 Firmware No fix yet Fix from $1,9502020-03-12 HIGH 7.8 CVE-2019-5181 An exploitable stack buffer overflow vulnerability vulnerability exists in the iocheckd service ‘I/O-Check’ functionality of WAGO PFC 200 Firmware ve… Pfc200 Firmware No fix yet Fix from $1,9502020-03-12