CVE-2023-1698

wagoexploit.py - PoC Exploit for CVE-2023-1698 🚀 About wagoexploit.py is a proof-of-concept PoC exploit for CVE-2023-1698 , a critical vulnerability affecting WAGO PLCs. This exploit grants the attacker shell access to the device, potentially exposing sensitive operations. ⚠️ Disclaimer: This...

EUVD-2021-21228

Malware in sbrugna...

CVE-2022-22511 WAGO PLCs WBM vulnerable to reflected XSS

Various configuration pages of the device are vulnerable to reflected XSS Cross-Site Scripting attacks. An authorized attacker with user privileges may use this to gain access to confidential information on a PC that connects to the WBM after it has been compromised...

CVE-2021-34578

This vulnerability allows an attacker who has access to the WBM to read and write settings-parameters of the device by sending specifically constructed requests without authentication on multiple WAGO PLCs in firmware versions up to FW07...

Authentication flaw

This vulnerability allows an attacker who has access to the WBM to read and write settings-parameters of the device by sending specifically constructed requests without authentication on multiple WAGO PLCs in firmware versions up to FW07...

CVE-2021-34578

CVE-2021-34578 affects WAGO PLCs (e.g., firmware versions up to FW07) where an authentication issue in the WBM allows an attacker with access to read and write device settings by sending specially crafted requests. The vulnerability arises from improper authentication/authorization of settings-pa...

CVE-2021-34578: Improper Authentication

This vulnerability allows an attacker who has access to the WBM to read and write settings-parameters of the device by sending specifically constructed requests without authentication on multiple WAGO PLCs in firmware versions up to FW07...

PT-2021-20559

Name of the Vulnerable Software and Affected Versions: WAGO PLCs versions up to FW07 Description: This issue allows an attacker with access to the WBM to read and write device settings-parameters by sending specifically constructed requests without authentication. Recommendations: For versions up...

Wago Shell

Added: 03/31/2016 Background Wago PLCs are used in Factory and building automation. Wago ethernet PLCs are connected by IP and can be administered remotely. Problem Wago PLC devices use CoDeSyS protocols to program the device. If the programming ports are left open an attacker is able to upload,...

Wago Shell

Added: 03/31/2016 Background Wago PLCs are used in Factory and building automation. Wago ethernet PLCs are connected by IP and can be administered remotely. Problem Wago PLC devices use CoDeSyS protocols to program the device. If the programming ports are left open an attacker is able to upload,...