EUVD-2018-4932

🗓️ 07 Oct 2025 00:30:54Reported by EUVDType

Vulnerability on WAGO e!DISPLAY allows code injection via crafted requests on web server.

Reporter	Title	Published	Views	Family All 11
0day.today	WAGO e!DISPLAY 7300T XSS / File Upload / Code Execution Vulnerabilities	12 Jul 201800:00	–	zdt
Circl	CVE-2018-12981	13 Jul 201800:00	–	circl
CVE	CVE-2018-12981	12 Jul 201818:00	–	cve
Cvelist	CVE-2018-12981	12 Jul 201818:00	–	cvelist
Exploit DB	WAGO e!DISPLAY 7300T - Multiple Vulnerabilities	13 Jul 201800:00	–	exploitdb
exploitpack	WAGO e!DISPLAY 7300T - Multiple Vulnerabilities	13 Jul 201800:00	–	exploitpack
ICS	WAGO e!DISPLAY Web-Based-Management	17 Jul 201800:00	–	ics
NVD	CVE-2018-12981	12 Jul 201818:29	–	nvd
Packet Storm	WAGO e!DISPLAY 7300T XSS / File Upload / Code Execution	11 Jul 201800:00	–	packetstorm
Prion	Design/Logic Flaw	12 Jul 201818:29	–	prion

[
  {
    "enisaIdVendor": [
      {
        "id": "d3f65e7a-6adf-3a52-ac15-b6002817f539",
        "vendor": {
          "name": "n/a"
        }
      }
    ],
    "enisaIdProduct": [
      {
        "id": "4dfbdf08-c094-3fa4-9517-5f75e2bcf694",
        "product": {
          "name": "n/a"
        },
        "product_version": "n/a"
      }
    ]
  }
]

Source	Link
packetstormsecurity	www.packetstormsecurity.com/files/cve/CVE-2018-12981
cert	www.cert.vde.com/en-us/advisories/vde-2018-010
sec-consult	www.sec-consult.com/en/blog/advisories/remote-code-execution-via-multiple-attack-vectors-in-wago-edisplay/
ics-cert	www.ics-cert.us-cert.gov/advisories/ICSA-18-198-02
wago	www.wago.com/medias/SA-WBM-2018-004.pdf
exploit-db	www.exploit-db.com/exploits/45014/
seclists	www.seclists.org/fulldisclosure/2018/Jul/38
github	www.github.com/advisories/GHSA-293c-r3p4-g63r

07 Oct 2025 00:30Current

6.4Medium risk

Vulners AI Score6.4

CVSS 3.15.4

CVSS 23.5

EPSS0.02155