WAGO Series 750-88x and 750-352 Uncontrolled Resource Consumption (CVE-2020-12516)

Older firmware versions FW1 up to FW10 of the WAGO PLC family 750-88x and 750-352 are vulnerable for a special denial of service attack. - Older firmware versions FW1 up to FW10 of the WAGO PLC family 750-88x and 750-352 are vulnerable for a special denial of service attack. CVE-2020-12516 This...

Wago Multiple products - Web-Based Management Cross-site Scripting (CVE-2022-22511)

Various configuration pages of the device are vulnerable to reflected XSS Cross-Site Scripting attacks. An authorized attacker with user privileges may use this to gain access to confidential information on a PC that connects to the WBM after it has been compromised. - Various configuration pages...

Wago PFC200 Path Traversal (CVE-2021-21001)

On WAGO PFC200 devices in different firmware versions with special crafted packets an authorised attacker with network access to the device can access the file system with higher privileges. - On WAGO PFC200 devices in different firmware versions with special crafted packets an authorised attacke...

Wago OpenSSL DoS Vulnerability in PLCs (CVE-2021-34581)

Missing Release of Resource after Effective Lifetime vulnerability in OpenSSL implementation of WAGO 750-831/xxx-xxx, 750-880/xxx-xxx, 750-881, 750-889 in versions FW4 up to FW15 allows an unauthenticated attacker to cause DoS on the device. - Missing Release of Resource after Effective Lifetime...

Wago 750-8XX series Improper Authentication (CVE-2020-12506)

Improper Authentication vulnerability in WAGO 750-8XX series with FW version = FW03 allows an attacker to change the settings of the devices by sending specifically constructed requests without authentication This issue affects: WAGO 750-362, WAGO 750-363, WAGO 750-823, WAGO 750-832/xxx-xxx, WAGO...

Wago PFC200 Denial of Service (CVE-2021-21000)

On WAGO PFC200 devices in different firmware versions with special crafted packets an attacker with network access to the device could cause a denial of service for the login service of the runtime. - On WAGO PFC200 devices in different firmware versions with special crafted packets an attacker...

Wago IO 750-849 & 750-881 No Privilege Separation (CVE-2015-6473)

WAGO IO 750-849 01.01.27 and WAGO IO 750-881 01.02.05 do not contain privilege separation. This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more information. C Tenable, Inc. include'compat.inc'; if description scriptid500679; scriptversion"1.4";...

Wago 750-8XX series Improper Authentication (CVE-2020-12505)

Improper Authentication vulnerability in WAGO 750-8XX series with FW version = FW07 allows an attacker to change some special parameters without authentication. This issue affects: WAGO 750-852, WAGO 750-880/xxx-xxx, WAGO 750-881, WAGO 750-831/xxx-xxx, WAGO 750-882, WAGO 750-885/xxx-xxx, WAGO...

Wago 750-36X & 750-8XX Improper Authentication (CVE-2021-34578)

This vulnerability allows an attacker who has access to the WBM to read and write settings-parameters of the device by sending specifically constructed requests without authentication on multiple WAGO PLCs in firmware versions up to FW07. - This vulnerability allows an attacker who has access to...

Wago IO 750-849 & 750-881 Weak Credential Management (CVE-2015-6472)

WAGO IO 750-849 01.01.27 and 01.02.05, WAGO IO 750-881, and WAGO IO 758-870 have weak credential management. This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more information. C Tenable, Inc. include'compat.inc'; if description scriptid500680;...

wago-tippspiel.com Cross Site Scripting vulnerability OBB-2576616

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

The vulnerability of the microprogrammed software for WAGO 750-8212 programmable logic controllers (PFC200), related to the manipulation of inter-site requests, allows intruders to carry out inter-site attack attacks.

The vulnerability of the microprogrammed software of WAGO 750-8212 programmable logic controllers PFC200 is related to the manipulation of intersite requests. Exploiting this vulnerability allows a remote attacker to perform intersite attack attacks...

CVE-2022-22511 WAGO PLCs WBM vulnerable to reflected XSS

Various configuration pages of the device are vulnerable to reflected XSS Cross-Site Scripting attacks. An authorized attacker with user privileges may use this to gain access to confidential information on a PC that connects to the WBM after it has been compromised...

WAGO PLC 跨站脚本漏洞

WAGO PLC is a programmable logic controller from WAGO, Germany. A cross-site scripting vulnerability exists in WAGO PLC, which can be used by an authorized attacker with user rights to access confidential information on a PC connected to the WBM...

WAGO Cross-Site Request Forgery Vulnerability

WAGO is a 750-88x series programmable logic controller from WAGO, Germany. The device is designed specifically for applications in industrial environments where digital algorithms operate electronic systems. A security vulnerability exists in the WAGO 750-8212 PFC200 G2 2ETH RS that originates fr...

编号撤回

WAGO is a 750-88x series programmable logic controller from WAGO, Germany. The device is designed specifically for applications in industrial environments where digital algorithms operate electronic systems. A security vulnerability exists in the WAGO 750-8212 PFC200 G2 2ETH RS that originates fr...

WAGO 750-8212 PFC200 G2 2ETH RS Privilege Escalation

Exploit Title: WAGO 750-8212 PFC200 G2 2ETH RS Privilege Escalation Date: 02/16/2022 Exploit Author: Momen Eldawakhly Cyber Guy at Cypro AB Vendor Homepage: https://www.wago.com Version: Firmware version 03.05.1017 Tested on: PopOS! Linux CVE : CVE-2021-46388...

WAGO 750-8212 PFC200 G2 2ETH RS - Privilege Escalation Vulnerability

Exploit Title: WAGO 750-8212 PFC200 G2 2ETH RS Privilege Escalation Exploit Author: Momen Eldawakhly Cyber Guy at Cypro AB Vendor Homepage: https://www.wago.com Version: Firmware version 03.05.1017 Tested on: PopOS! Linux CVE : CVE-2021-46388 ======================================== = The ordinar...

WAGO 750-8212 PFC200 G2 2ETH RS - Privilege Escalation

Exploit Title: WAGO 750-8212 PFC200 G2 2ETH RS Privilege Escalation Date: 02/16/2022 Exploit Author: Momen Eldawakhly Cyber Guy at Cypro AB Vendor Homepage: https://www.wago.com Version: Firmware version 03.05.1017 Tested on: PopOS! Linux ======================================== = The ordinary us...

WAGO 750-8xxx PLC Denial Of Service / User Enumeration Vulnerability

WAGO 750-8xxx PLC versions prior to Firmware 20 Patch 1 v03.08.08 suffer from denial of service and user enumeration vulnerabilities. ======================================================================= title: Denial of service & User Enumeration product: WAGO 750-8xxx PLC vulnerable version:...