Design/Logic Flaw

Missing Release of Resource after Effective Lifetime vulnerability in OpenSSL implementation of WAGO 750-831/xxx-xxx, 750-880/xxx-xxx, 750-881, 750-889 in versions FW4 up to FW15 allows an unauthenticated attacker to cause DoS on the device...

PT-2021-20562

Name of the Vulnerable Software and Affected Versions: WAGO 750-831/xxx-xxx versions FW4 through FW15 WAGO 750-880/xxx-xxx versions FW4 through FW15 WAGO 750-881 versions FW4 through FW15 WAGO 750-889 versions FW4 through FW15 Description: The issue is related to a Missing Release of Resource aft...

CVE-2021-34581: Missing Release of Resource after Effective Lifetime

Missing Release of Resource after Effective Lifetime vulnerability in OpenSSL implementation of WAGO 750-831/xxx-xxx, 750-880/xxx-xxx, 750-881, 750-889 in versions FW4 up to FW15 allows an unauthenticated attacker to cause DoS on the device...

WAGO 安全漏洞

WAGO is a 750-88x series programmable logic controller from WAGO, Germany. This device is designed for applications in industrial environments where digital algorithms operate electronic systems. A security vulnerability in the OpenSSL implementation of the WAGO 750-831/xxx xxx, 750-880/xxx xxx,...

WAGO 750-881 Ethernet Controller Device Cross-Site Scripting Vulnerability

The WAGO 750-881 Ethernet Controller devices is an Ethernet controller device from WAGO Germany. A cross-site scripting vulnerability exists in the SNMP configuration of the webserv/cplcfg/snmp.ssi file in the WAGO 750-881 Ethernet Controller device version 01.09.1813 and earlier, which can be...

WAGO 750-881 01.09.18 Cross Site Scripting

Exploit Title: WAGO 750-881 01.09.18 - Cross-Site Scripting Date: 2018-08-30 Exploit Author: SecuNinja @secuninja Vendor Homepage: wago.com Version: 01.09.1813 and earlier Affected Products: Ethernet Controller 750-881 - 01.09.1813, 01.08.01 10 CVE : N/A Description WAGO 750-881 Ethernet Controll...

WAGO 750-881 01.09.18 - Cross-Site Scripting Vulnerability

Exploit for php platform in category web applications Exploit Title: WAGO 750-881 01.09.18 - Cross-Site Scripting Exploit Author: SecuNinja @secuninja Vendor Homepage: wago.com Version: 01.09.1813 and earlier Affected Products: Ethernet Controller 750-881 - 01.09.1813, 01.08.01 10 CVE : N/A...

WAGO 750-881 01.09.18 - Cross-Site Scripting

WAGO 750-881 01.09.18 - Cross-Site Scripting Exploit Title: WAGO 750-881 01.09.18 - Cross-Site Scripting Date: 2018-08-30 Exploit Author: SecuNinja @secuninja Vendor Homepage: wago.com Version: 01.09.1813 and earlier Affected Products: Ethernet Controller 750-881 - 01.09.1813, 01.08.01 10 CVE : N...

WAGO 750-881 01.09.18 - Cross-Site Scripting

Exploit Title: WAGO 750-881 01.09.18 - Cross-Site Scripting Date: 2018-08-30 Exploit Author: SecuNinja @secuninja Vendor Homepage: wago.com Version: 01.09.1813 and earlier Affected Products: Ethernet Controller 750-881 - 01.09.1813, 01.08.01 10 CVE : N/A Description WAGO 750-881 Ethernet Controll...

CVE-2015-6473

WAGO IO 750-849 01.01.27 and WAGO IO 750-881 01.02.05 do not contain privilege separation...

CVE-2015-6473

Affected products: WAGO IO 750-849 (firmware 01.01.27) and WAGO IO 750-881 (firmware 01.02.05). Root cause: absence of privilege separation in these devices. Impact: allows escalation of privileges or unauthorized access affecting confidentiality, integrity, and availability as indicated by CVSS3...

CVE-2015-6473

WAGO IO 750-849 01.01.27 and WAGO IO 750-881 01.02.05 do not contain privilege separation...

CVE-2015-6473: Undefined Security Weakness

WAGO IO 750-849 01.01.27 and WAGO IO 750-881 01.02.05 do not contain privilege separation...

CVE-2015-6472: Undefined Security Weakness

WAGO IO 750-849 01.01.27 and 01.02.05, WAGO IO 750-881, and WAGO IO 758-870 have weak credential management...

PT-2017-7025

Name of the Vulnerable Software and Affected Versions WAGO IO 750-849 versions 01.01.27 through 01.02.05 WAGO IO 750-881 WAGO IO 758-870 Description The issue is related to weak credential management. Recommendations For WAGO IO 750-849 versions 01.01.27 through 01.02.05, update the credential...

PT-2017-7026

Name of the Vulnerable Software and Affected Versions WAGO IO 750-849 version 01.01.27 WAGO IO 750-881 version 01.02.05 Description The issue is related to the lack of privilege separation. Recommendations For WAGO IO 750-849 version 01.01.27, consider implementing additional access controls to...

CVE-2016-9362: Improper Authentication

An issue was discovered in WAGO 750-8202/PFC200 prior to FW04 released August 2015, WAGO 750-881 prior to FW09 released August 2016, and WAGO 0758-0874-0000-0111. By accessing a specific uniform resource locator URL on the web server, a malicious user is able to edit and to view settings without...

PT-2017-10086

Name of the Vulnerable Software and Affected Versions WAGO 750-8202/PFC200 versions prior to FW04 WAGO 750-881 versions prior to FW09 WAGO 0758-0874-0000-0111 affected versions not specified Description An issue allows a malicious user to edit and view settings without authenticating by accessing...