Browse CVEs

CRITICAL 9.8 CVE-2019-5081 An exploitable heap buffer overflow vulnerability exists in the iocheckd service ''I/O-Chec'' functionality of WAGO PFC 200 Firmware version 03.01.07… Pfc 200 Firmware No fix yet Fix from $2,3002019-12-18 CRITICAL 9.1 CVE-2019-5077 An exploitable denial-of-service vulnerability exists in the iocheckd service ‘’I/O-Chec’’ functionality of WAGO PFC 200 Firmware versions 03.01.07(1… Pfc 200 Firmware Mitigation only Fix from $2,3002019-12-18 MEDIUM 5.3 CVE-2019-18202 Information Disclosure is possible on WAGO Series PFC100 and PFC200 devices before FW12 due to improper access control. A remote attacker can check f… Pfc Firmware 03.00.35+ Fix from $1,6002019-10-19 CRITICAL 9.8 CVE-2019-12549 WAGO 852-303 before FW06, 852-1305 before FW06, and 852-1505 before FW03 devices contain hardcoded private keys for the SSH daemon. The fingerprint o… 852 303 Firmware 1.1.5.s0 / 1.1.6.s0+ Fix from $2,3002019-06-17 CRITICAL 9.8 CVE-2019-12550 WAGO 852-303 before FW06, 852-1305 before FW06, and 852-1505 before FW03 devices contain hardcoded users and passwords that can be used to login via … 852 303 Firmware 1.1.5.s0 / 1.1.6.s0+ Fix from $2,3002019-06-17 CRITICAL 9.8 CVE-2019-10712 The Web-GUI on WAGO Series 750-88x (750-330, 750-352, 750-829, 750-831, 750-852, 750-880, 750-881, 750-882, 750-884, 750-885, 750-889) and Series 750… 750 830 Firmware 06 / 07+ Fix from $2,3002019-05-07 MEDIUM 6.1 CVE-2018-16210 WAGO 750-88X and WAGO 750-89X Ethernet Controller devices, versions 01.09.18(13) and before, have XSS in the SNMP configuration via the webserv/cplcf… 750 362 Firmware 05 / 14+ Fix from $1,6002018-10-12 HIGH 8.8 CVE-2018-12980EPSS 30% An issue was discovered on WAGO e!DISPLAY 762-3000 through 762-3003 devices with firmware before FW 02. The vulnerability allows an authenticated use… 762 3000 Firmware 02+ Fix from $1,9502018-07-12 MEDIUM 6.5 CVE-2018-12979EPSS 8% An issue was discovered on WAGO e!DISPLAY 762-3000 through 762-3003 devices with firmware before FW 02. Weak permissions allow an authenticated user … 762 3000 Firmware 02+ Fix from $1,6002018-07-12 MEDIUM 5.4 CVE-2018-12981EPSS 5% An issue was discovered on WAGO e!DISPLAY 762-3000 through 762-3003 devices with firmware before FW 02. The vulnerability can be exploited by authent… 762 3000 Firmware 02+ Fix from $1,6002018-07-12 MEDIUM 5.3 CVE-2018-8836 Wago 750 Series PLCs with firmware version 10 and prior include a remote attack may take advantage of an improper implementation of the 3 way handsha… 750 880 Firmware after 10 Fix from $1,6002018-04-03 CRITICAL 9.8 CVE-2018-5459 An Improper Authentication issue was discovered in WAGO PFC200 Series 3S CoDeSys Runtime versions 2.3.X and 2.4.X. An attacker can execute different … Pfc200 Firmware 02.07.07+ Fix from $2,3002018-02-13 CRITICAL 9.8 CVE-2015-6472 WAGO IO 750-849 01.01.27 and 01.02.05, WAGO IO 750-881, and WAGO IO 758-870 have weak credential management. 750 849 Firmware No fix yet Fix from $2,3002017-08-22 CRITICAL 9.8 CVE-2015-6473 WAGO IO 750-849 01.01.27 and WAGO IO 750-881 01.02.05 do not contain privilege separation. 750 849 Firmware No fix yet Fix from $2,3002017-08-22 CRITICAL 9.1 CVE-2016-9362 An issue was discovered in WAGO 750-8202/PFC200 prior to FW04 (released August 2015), WAGO 750-881 prior to FW09 (released August 2016), and WAGO 075… Pfc200 Firmware Mitigation only Fix from $2,3002017-02-13 HIGH 10.0 CVE-2012-3013 WAGO I/O System 758 model 758-870, 758-874, 758-875, and 758-876 Industrial PC (IPC) devices have default passwords for unspecified Web Based Managem… Wago I\/o System 758 Industrial Pc Device Mitigation only Fix from $1,9502012-09-07 HIGH 10.0 CVE-2012-4879 The Linux Console on the WAGO I/O System 758 model 758-870, 758-874, 758-875, and 758-876 Industrial PC (IPC) devices has a default password of wago … Wago I\/o System 758 Industrial Pc Device Mitigation only Fix from $1,9502012-09-07