The configuration backend of the web-based management is vulnerable to reflected XSS (Cross-Site Scripting) attacks that targets the users browser

The vulnerability allows a remote unauthenticated attacker to download a backup file, if one exists

Wago web-based management of multiple products has a vulnerability which allows an local authenticated attacker to change the passwords of other non-admin users and thus to…

A CORS Misconfiguration in the web-based management allows a malicious third party webserver to misuse all basic information pages on the webserver