Login Request a demo
WA
Vendor
Wago
239 products with CVEs on record
1,307
CVEs
0
On KEV
11
New 30D
Products
07
0750-811x-xxxx-xxxx
WAGO
9.8
1 CVEs0 on KEV1 new
07
0750-821x-xxx-xxx
WAGO
9.8
1 CVEs0 on KEV1 new
07
0751-9x01
WAGO
9.8
1 CVEs0 on KEV1 new
07
0752-8303-8000-0002
WAGO
9.8
1 CVEs0 on KEV1 new
07
0762-340x
WAGO
9.8
1 CVEs0 on KEV1 new
07
0762-420x-8000-000x
WAGO
9.8
1 CVEs0 on KEV1 new
07
0762-430x-8000-000x
WAGO
9.8
1 CVEs0 on KEV1 new
07
0762-520x-8000-000x
WAGO
9.8
1 CVEs0 on KEV1 new
07
0762-530x-8000-000x
WAGO
9.8
1 CVEs0 on KEV1 new
07
0762-620x-8000-000x
WAGO
9.8
1 CVEs0 on KEV1 new
07
0762-630x-8000-000x
WAGO
9.8
1 CVEs0 on KEV1 new
PF
Pfc200 Firmware
Wago
9.8
40 CVEs0 on KEV0 new
7F
750-8202 Firmware
Wago
9.8
27 CVEs0 on KEV0 new
7F
750-831 Firmware
Wago
9.8
26 CVEs0 on KEV0 new
7F
750-880 Firmware
Wago
9.8
26 CVEs0 on KEV0 new
7F
750-852 Firmware
Wago
9.8
25 CVEs0 on KEV0 new
7F
750-881 Firmware
Wago
9.8
25 CVEs0 on KEV0 new
7F
750-823 Firmware
Wago
9.8
24 CVEs0 on KEV0 new
7F
750-832 Firmware
Wago
9.8
24 CVEs0 on KEV0 new
7F
750-862 Firmware
Wago
9.8
24 CVEs0 on KEV0 new
7F
750-889 Firmware
Wago
9.8
24 CVEs0 on KEV0 new
7F
750-8206 Firmware
Wago
9.8
23 CVEs0 on KEV0 new
7F
750-8207 Firmware
Wago
9.8
23 CVEs0 on KEV0 new
7F
750-8210 Firmware
Wago
9.8
23 CVEs0 on KEV0 new
7F
750-8211 Firmware
Wago
9.8
23 CVEs0 on KEV0 new
7F
750-8212 Firmware
Wago
9.8
23 CVEs0 on KEV0 new
7F
750-8213 Firmware
Wago
9.8
23 CVEs0 on KEV0 new
7F
750-8214 Firmware
Wago
9.8
23 CVEs0 on KEV0 new
7F
750-8216 Firmware
Wago
9.8
23 CVEs0 on KEV0 new
7F
750-8217 Firmware
Wago
9.8
23 CVEs0 on KEV0 new
7F
750-829 Firmware
Wago
9.8
23 CVEs0 on KEV0 new
7F
750-8203 Firmware
Wago
9.8
22 CVEs0 on KEV0 new
7F
750-8204 Firmware
Wago
9.8
22 CVEs0 on KEV0 new
7F
750-8208 Firmware
Wago
9.8
22 CVEs0 on KEV0 new
7F
750-882 Firmware
Wago
9.8
22 CVEs0 on KEV0 new
7F
750-885 Firmware
Wago
9.8
22 CVEs0 on KEV0 new
7F
750-891 Firmware
Wago
9.8
22 CVEs0 on KEV0 new
7F
750-890 Firmware
Wago
9.8
21 CVEs0 on KEV0 new
7F
750-893 Firmware
Wago
9.8
20 CVEs0 on KEV0 new
PF
Pfc100 Firmware
Wago
9.8
13 CVEs0 on KEV0 new
7F
752-8303/8000-002 Firmware
Wago
9.8
9 CVEs0 on KEV0 new
P1
Pfc 100 Firmware
Wago
9.8
9 CVEs0 on KEV0 new
P2
Pfc 200 Firmware
Wago
9.8
9 CVEs0 on KEV0 new
TP
Touch Panel 600 Advanced Firmware
Wago
9.8
9 CVEs0 on KEV0 new
TP
Touch Panel 600 Marine Firmware
Wago
9.8
9 CVEs0 on KEV0 new
TP
Touch Panel 600 Standard Firmware
Wago
9.8
9 CVEs0 on KEV0 new
7F
750-8202/000-012 Firmware
Wago
9.8
8 CVEs0 on KEV0 new
7F
750-8202/000-022 Firmware
Wago
9.8
8 CVEs0 on KEV0 new
7F
750-8100 Firmware
Wago
9.8
7 CVEs0 on KEV0 new
7F
750-8101 Firmware
Wago
9.8
7 CVEs0 on KEV0 new
7F
750-8102 Firmware
Wago
9.8
7 CVEs0 on KEV0 new
7F
750-8202/000-011 Firmware
Wago
9.8
7 CVEs0 on KEV0 new
7F
750-8202/025-000 Firmware
Wago
9.8
7 CVEs0 on KEV0 new
7F
750-8202/025-001 Firmware
Wago
9.8
7 CVEs0 on KEV0 new
7F
750-8202/040-000 Firmware
Wago
9.8
7 CVEs0 on KEV0 new
0F
0852-0303 Firmware
Wago
9.8
6 CVEs0 on KEV0 new
0F
0852-1305/000-001 Firmware
Wago
9.8
6 CVEs0 on KEV0 new
0F
0852-1305 Firmware
Wago
9.8
6 CVEs0 on KEV0 new
0F
0852-1505/000-001 Firmware
Wago
9.8
6 CVEs0 on KEV0 new
0F
0852-1505 Firmware
Wago
9.8
6 CVEs0 on KEV0 new
Recent CVEs
CVEProductCVSSEPSSPublishedSummary
CVE-2025-41753
07
0751-9x01
WAGO
9.8
1%
Oct 1Path traversal in dynamically created BACnet File Objects
CVE-2026-4769
07
0765-120x/0100-0000
WAGO
9.8
1%
Jul 13Unauthenticated Access to Internal Diagnostic Interface
CVE-2023-5872
SD
Smart Designer
Wago
4.3
0%
Apr 16Wago: Vulnerability in Smart Designer Web-Application
CVE-2024-1490
C0
CC100 (0751-9x01)
WAGO
7.2
1%
Apr 9Wago: Vulnerability in WBM through Open VPN
CVE-2026-2328
DS
Device Sphere
WAGO
7.5
0%
Mar 30Backend Access Due to Insufficient Input Validation
CVE-2026-3587
LM
Lean Managed Switch 852-1812
WAGO
10.0
1%
Mar 23Hidden CLI Function Allows Root Access
CVE-2026-22906
08
0852-1322
WAGO
9.8
0%
Feb 9Hardcoded Key Allows Credential Disclosure
CVE-2026-22905
08
0852-1328
WAGO
7.5
1%
Feb 9Authentication Bypass via URI Traversal
CVE-2026-22904
08
0852-1322
WAGO
9.8
1%
Feb 9Stack Overflow via Oversized Cookie Fields in lighttpd
CVE-2026-22903
08
0852-1328
WAGO
9.8
1%
Feb 9Stack Overflow via SESSIONID Cookie in lighttpd
CVE-2022-50926
W7
WAGO 750-8212 PFC200
Wago
9.8
1%
Jan 13WAGO 750-8212 PFC200 G2 2ETH RS Privilege Escalation
CVE-2025-41732
IN
Indsutrial-Managed-Switches
WAGO
9.8
0%
Dec 10Stack-based buffer overflow via unsafe sscanf in check_cookie()
CVE-2025-41730
IN
Indsutrial-Managed-Switches
WAGO
9.8
0%
Dec 10Stack-based buffer overflow via unsafe sscanf in check_account()
CVE-2023-5188
WA
Wagoapprtu
Wago
7.5
1%
Dec 5The MMS Interpreter of WagoAppRTU in versions below 1.4.6.0 which is used by the WAGO Telecontrol Configurator is vulnerable to malformed packets
CVE-2023-4149
0F
0852-1605 Firmware
Wago
9.8
1%
Nov 21A vulnerability in the web-based management allows an unauthenticated remote attacker to inject arbitrary system commands and gain full system control
CVE-2023-3379
CC
Compact Controller 100 Firmware
Wago
5.3
0%
Nov 20Wago web-based management of multiple products has a vulnerability which allows an local authenticated attacker to change the passwords of other non-admin users and thus to…
CVE-2023-4089
TP
Touch Panel 600 Marine Firmware
Wago
2.7
1%
Oct 17On affected Wago products an remote attacker with administrative privileges can access files to which he has already access to through an undocumented local file inclusion
CVE-2023-1620
7F
750-8207 Firmware
Wago
4.9
1%
Jun 26Multiple WAGO devices in multiple versions may allow an authenticated remote attacker with high privileges to DoS the device by sending a specifically crafted packet to the…
CVE-2023-1619
7F
750-8202/000-011 Firmware
Wago
4.9
1%
Jun 26Multiple WAGO devices in multiple versions may allow an authenticated remote attacker with high privileges to DoS the device by sending a malformed packet
CVE-2023-1150
7F
750-890/040-000 Firmware
Wago
7.5
1%
Jun 26Uncontrolled resource consumption in Series WAGO 750-3x/-8x products may allow an unauthenticated remote attacker to DoS the MODBUS server with specially crafted packets
CVE-2023-1698
EC
Edge Controller Firmware
Wago
9.8
82%
May 15In multiple products of WAGO a vulnerability allows an unauthenticated, remote attacker to create new users and change the device configuration which can result in unintended…
CVE-2022-45140
7F
752-8303/8000-002 Firmware
Wago
9.8
1%
Feb 27The configuration backend allows an unauthenticated user to write arbitrary data with root privileges to the storage, which could lead to unauthenticated remote code execution and…
CVE-2022-45139
PF
Pfc100 Firmware
Wago
5.3
0%
Feb 27A CORS Misconfiguration in the web-based management allows a malicious third party webserver to misuse all basic information pages on the webserver
CVE-2022-45138
7F
752-8303/8000-002 Firmware
Wago
9.8
1%
Feb 27The configuration backend of the web-based management can be used by unauthenticated users, although only authenticated users should be able to use the API
CVE-2022-45137
PF
Pfc100 Firmware
Wago
6.1
0%
Feb 27The configuration backend of the web-based management is vulnerable to reflected XSS (Cross-Site Scripting) attacks that targets the users browser
CVE-2022-3843
8F
852-111/000-001 Firmware
Wago
9.1
1%
Feb 16In WAGO Unmanaged Switch (852-111/000-001) in firmware version 01 an undocumented configuration interface without authorization allows an remote attacker to read system…
CVE-2022-3738
PF
Pfc100 Firmware
Wago
5.9
1%
Jan 19The vulnerability allows a remote unauthenticated attacker to download a backup file, if one exists
CVE-2020-12069
7F
750-8216 Firmware
Wago
7.8
0%
Dec 26In CODESYS V3 products in all versions prior V3.5.16.0 containing the CmpUserMgr, the CODESYS Control runtime system stores the online communication passwords using a weak hashing…
CVE-2021-34569
7F
750-8202/000-011 Firmware
Wago
9.8
1%
Nov 9In WAGO I/O-Check Service in multiple products an attacker can send a specially crafted packet containing OS commands to crash the diagnostic tool and write memory
CVE-2021-34568
7F
762-4303/8000-002 Firmware
Wago
7.5
1%
Nov 9In WAGO I/O-Check Service in multiple products an unauthenticated remote attacker can send a specially crafted packet containing OS commands to provoke a denial of service
CVE-2021-34567
7F
762-4202/8000-001 Firmware
Wago
8.2
1%
Nov 9In WAGO I/O-Check Service in multiple products an unauthenticated remote attacker can send a specially crafted packet containing OS commands to provoke a denial of service and an…
CVE-2021-34566
7F
762-4205/8000-002 Firmware
Wago
9.1
1%
Nov 9In WAGO I/O-Check Service in multiple products an unauthenticated remote attacker can send a specially crafted packet containing OS commands to crash the iocheck process and write…
CVE-2022-3281
7S
762-4xxx Series Touch Panel 600
WAGO
7.5
1%
Oct 17WAGO: multiple products - Loss of MAC-Address-Filtering after reboot
CVE-2022-22511
7F
762-4306/8000-002 Firmware
Wago
5.4
0%
Mar 9Various configuration pages of the device are vulnerable to reflected XSS (Cross-Site Scripting) attacks
CVE-2021-34596
7F
750-8217 Firmware
Wago
6.5
1%
Oct 26A crafted request may cause a read access to an uninitialized pointer in CODESYS V2 Runtime Toolkit 32 Bit full and PLCWinNT prior to versions V2.4.7.56, resulting in a…
CVE-2021-34595
7F
750-8210 Firmware
Wago
8.1
1%
Oct 26A crafted request with invalid offsets may cause an out-of-bounds read or write access in CODESYS V2 Runtime Toolkit 32 Bit full and PLCWinNT prior to versions V2.4.7.56,…
CVE-2021-34593
7F
750-8214 Firmware
Wago
7.5
3%
Oct 26In CODESYS V2 Runtime Toolkit 32 Bit full and PLCWinNT prior to versions V2.4.7.56 unauthenticated crafted invalid requests may result in several denial-of-service conditions
CVE-2021-34586
7F
750-8206 Firmware
Wago
7.5
14%
Oct 26In the CODESYS V2 web server prior to V1.1.9.22 crafted web server requests may cause a Null pointer dereference in the CODESYS web server and may result in a denial-of-service…
CVE-2021-34585
7F
750-8210 Firmware
Wago
7.5
1%
Oct 26In the CODESYS V2 web server prior to V1.1.9.22 crafted web server requests can trigger a parser error
CVE-2021-34584
7F
750-889 Firmware
Wago
9.1
1%
Oct 26Crafted web server requests can be utilised to read partial stack or heap memory or may trigger a denial-of- service condition due to a crash in the CODESYS V2 web server prior to…
CVE-2021-34583
7F
750-8217 Firmware
Wago
7.5
9%
Oct 26Crafted web server requests may cause a heap-based buffer overflow and could therefore trigger a denial-of- service condition due to a crash in the CODESYS V2 web server prior to…
CVE-2021-34581
7F
750-880/025-001 Firmware
Wago
7.5
1%
Aug 31Missing Release of Resource after Effective Lifetime vulnerability in OpenSSL implementation of WAGO 750-831/xxx-xxx, 750-880/xxx-xxx, 750-881, 750-889 in versions FW4 up to FW15…
CVE-2021-34578
7F
750-890/025-000 Firmware
Wago
8.1
1%
Aug 31This vulnerability allows an attacker who has access to the WBM to read and write settings-parameters of the device by sending specifically constructed requests without…
CVE-2021-30195
7F
750-8211 Firmware
Wago
7.5
8%
May 25CODESYS V2 runtime system before 2.4.7.55 has Improper Input Validation
CVE-2021-30194
7F
750-885 Firmware
Wago
9.1
1%
May 25CODESYS V2 Web-Server before 1.1.9.20 has an Out-of-bounds Read
CVE-2021-30193
7F
750-8211 Firmware
Wago
9.8
1%
May 25CODESYS V2 Web-Server before 1.1.9.20 has an Out-of-bounds Write
CVE-2021-30192
7F
750-823 Firmware
Wago
9.8
1%
May 25CODESYS V2 Web-Server before 1.1.9.20 has an Improperly Implemented Security Check
CVE-2021-30191
7F
750-880 Firmware
Wago
7.5
1%
May 25CODESYS V2 Web-Server before 1.1.9.20 has a a Buffer Copy without Checking the Size of the Input
CVE-2021-30190
7F
750-8211 Firmware
Wago
9.8
1%
May 25CODESYS V2 Web-Server before 1.1.9.20 has Improper Access Control
CVE-2021-30189
7F
750-8211 Firmware
Wago
9.8
1%
May 25CODESYS V2 Web-Server before 1.1.9.20 has a Stack-based Buffer Overflow
CVE-2021-30188
7F
750-8202 Firmware
Wago
9.8
1%
May 25CODESYS V2 runtime system SP before 2.4.7.55 has a Stack-based Buffer Overflow
CVE-2021-30186
7F
750-8206 Firmware
Wago
7.5
8%
May 25CODESYS V2 runtime system SP before 2.4.7.55 has a Heap-based Buffer Overflow
CVE-2021-30187
7F
750-8211 Firmware
Wago
5.3
0%
May 25CODESYS V2 runtime system SP before 2.4.7.55 has Improper Neutralization of Special Elements used in an OS Command
CVE-2021-21001
7F
750-829 Firmware
Wago
6.5
1%
May 24On WAGO PFC200 devices in different firmware versions with special crafted packets an authorised attacker with network access to the device can access the file system with higher…
CVE-2021-21000
7F
750-832 Firmware
Wago
7.5
1%
May 24On WAGO PFC200 devices in different firmware versions with special crafted packets an attacker with network access to the device could cause a denial of service for the login…
CVE-2021-20998
0F
0852-0303 Firmware
Wago
9.8
1%
May 13In multiple managed switches by WAGO in different versions without authorization and with specially crafted packets it is possible to create users
CVE-2021-20997
0F
0852-0303 Firmware
Wago
7.5
1%
May 13In multiple managed switches by WAGO in different versions it is possible to read out the password hashes of all Web-based Management users
CVE-2021-20996
0F
0852-1505 Firmware
Wago
5.3
1%
May 13In multiple managed switches by WAGO in different versions special crafted requests can lead to cookies being transferred to third parties
CVE-2021-20995
0F
0852-1305/000-001 Firmware
Wago
7.5
1%
May 13In multiple managed switches by WAGO in different versions the webserver cookies of the web based UI contain user credentials
CVE-2021-20994
0F
0852-1505 Firmware
Wago
6.1
1%
May 13In multiple managed switches by WAGO in different versions an attacker may trick a legitimate user to click a link to inject possible malicious code into the Web-Based Management