Wago vulnerabilities
99 CVEs and advisories name Wago as an affected vendor, newest first. Follow it as a feed.
- CVE-2019-5160An exploitable improper host validation vulnerability exists in the Cloud Connectivity functionality of WAGO PFC200 Firmware versions 03.02.
- CVE-2019-5168An exploitable command injection vulnerability exists in the iocheckd service ‘I/O-Check’ function of the WAGO PFC 200 version 03.02.02(14).
- CVE-2019-5167An exploitable command injection vulnerability exists in the iocheckd service ‘I/O-Check’ function of the WAGO PFC 200 version 03.02.02(14).
- CVE-2019-5166An exploitable stack buffer overflow vulnerability exists in the iocheckd service ‘I/O-Check’ functionality of WAGO PFC 200 version 03.02.02
- CVE-2019-5135An exploitable timing discrepancy vulnerability exists in the authentication functionality of the Web-Based Management (WBM) web application
- CVE-2019-5149The WBM web application on firmwares prior to 03.02.02 and 03.01.07 on the WAGO PFC100 and PFC2000, respectively, runs on a lighttpd web ser
- CVE-2019-5155An exploitable command injection vulnerability exists in the cloud connectivity feature of WAGO PFC200.
- CVE-2019-10953ABB, Phoenix Contact, Schneider Electric, Siemens, WAGO - Programmable Logic Controllers, multiple versions.
- CVE-2018-8836Wago 750 Series PLCs with firmware version 10 and prior include a remote attack may take advantage of an improper implementation of the 3 wa