Wago vulnerabilities
99 CVEs and advisories name Wago as an affected vendor, newest first. Follow it as a feed.
- CVE-2021-20996WAGO: Managed Switches: Unsecure Cookie settings
- CVE-2021-20995WAGO: Managed Switches: Storage of user credentials in a cookie
- CVE-2021-20994WAGO: Managed Switches: Reflected Cross-site Scripting
- CVE-2021-20993WAGO: Managed Switches: Exposure of sensitive information through directory listing
- CVE-2020-12522Command Injection Vulnerability in I/O-Check Service of WAGO PFC100, PFC200 and Touch Panel 600 Series with firmware versions <=FW10
- CVE-2020-12516WAGO: PLC families 750-88x and 750-352 prone to DoS attack
- CVE-2020-12506WAGO: Authentication Bypass Vulnerability in WAGO 750-36X and WAGO 750-8XX Versions <= FW03
- CVE-2020-12505WAGO: Vulnerability in web-based authentication in WAGO 750-8XX Version <= FW07
- CVE-2019-5181An exploitable stack buffer overflow vulnerability vulnerability exists in the iocheckd service ‘I/O-Check’ functionality of WAGO PFC 200 Fi
- CVE-2019-5180An exploitable stack buffer overflow vulnerability vulnerability exists in the iocheckd service ‘I/O-Check’ functionality of WAGO PFC 200 Fi
- CVE-2019-5179An exploitable stack buffer overflow vulnerability vulnerability exists in the iocheckd service ‘I/O-Check’ functionality of WAGO PFC 200 Fi
- CVE-2019-5178An exploitable stack buffer overflow vulnerability vulnerability exists in the iocheckd service ‘I/O-Check’ functionality of WAGO PFC 200 Fi
- CVE-2019-5177An exploitable stack buffer overflow vulnerability vulnerability exists in the iocheckd service ‘I/O-Check’ functionality of WAGO PFC 200 Fi
- CVE-2019-5176An exploitable stack buffer overflow vulnerability vulnerability exists in the iocheckd service ‘I/O-Check’ functionality of WAGO PFC 200 Fi
- CVE-2019-5171An exploitable command injection vulnerability exists in the iocheckd service ‘I/O-Check’ function of the WAGO PFC 200 Firmware version 03.0
- CVE-2019-5170An exploitable command injection vulnerability exists in the iocheckd service ‘I/O-Check’ function of the WAGO PFC 200 Firmware version 03.0
- CVE-2019-5169An exploitable command injection vulnerability exists in the iocheckd service ‘I/O-Check’ function of the WAGO PFC 200 Firmware version 03.0
- CVE-2019-5174An exploitable command injection vulnerability exists in the iocheckd service ‘I/O-Check’ function of the WAGO PFC 200 version 03.02.02(14).
- CVE-2019-5175An exploitable command injection vulnerability exists in the iocheckd service ‘I/O-Check’ function of the WAGO PFC 200 Firmware version 03.0
- CVE-2019-5172An exploitable command injection vulnerability exists in the iocheckd service ‘I/O-Check’ function of the WAGO PFC 200 Firmware version 03.0
- CVE-2019-5173An exploitable command injection vulnerability exists in the iocheckd service ‘I/O-Check’ function of the WAGO PFC 200 Firmware version 03.0
- CVE-2019-5182An exploitable stack buffer overflow vulnerability vulnerability exists in the iocheckd service ‘I/O-Check’ functionality of WAGO PFC 200 Fi
- CVE-2019-5106A hard-coded encryption key vulnerability exists in the authentication functionality of WAGO e!Cockpit version 1.5.1.1.
- CVE-2019-5107A cleartext transmission vulnerability exists in the network communication functionality of WAGO e!Cockpit version 1.5.1.1.
- CVE-2019-5134An exploitable regular expression without anchors vulnerability exists in the Web-Based Management (WBM) authentication functionality of WAG
- CVE-2019-5161An exploitable remote code execution vulnerability exists in the Cloud Connectivity functionality of WAGO PFC200 versions 03.02.02(14), 03.0
- CVE-2019-5156An exploitable command injection vulnerability exists in the cloud connectivity functionality of WAGO PFC200 versions 03.02.02(14), 03.01.07
- CVE-2019-5157An exploitable command injection vulnerability exists in the Cloud Connectivity functionality of WAGO PFC200 Firmware versions 03.02.02(14),
- CVE-2019-5158An exploitable firmware downgrade vulnerability exists in the firmware update package functionality of the WAGO e!COCKPIT automation softwar
- CVE-2019-5159An exploitable improper input validation vulnerability exists in the firmware update functionality of WAGO e!COCKPIT automation software v1.