Latest wago pfc100 firmware Vulnerabilities

● CVE-2023-3379

WAGO: Improper Privilege Management in web-based management

Wago Compact Controller 100 Firmware<=25

Wago Compact Controller 100

Wago Edge Controller Firmware<=25

Wago Edge Controller

WAGO PFC100 Firmware<22

WAGO PFC100 Firmware=22

and 14 more

● CVE-2023-4089

On affected Wago products an remote attacker with administrative privileges can access files to which he has already access to through an undocumented local file inclusion. This access is logged in a ...

Wago Compact Controller 100 Firmware>=19<=26

Wago Compact Controller 100

Wago Edge Controller Firmware>=18<=26

Wago Edge Controller

WAGO PFC100 Firmware>=16<=26

WAGO PFC100

and 8 more

● CVE-2022-45140

The configuration backend allows an unauthenticated user to write arbitrary data with root privileges to the storage, which could lead to unauthenticated remote code execution and full system compromi...

Wago 751-9301 Firmware>=16<22

Wago 751-9301 Firmware=22

Wago 751-9301 Firmware=23

Wago 751-9301

Wago 752-8303\/8000-002 Firmware>=18<22

Wago 752-8303\/8000-002 Firmware=22

and 22 more

● CVE-2022-45138

The configuration backend of the web-based management can be used by unauthenticated users, although only authenticated users should be able to use the API. The vulnerability allows an unauthenticated...

Wago 751-9301 Firmware>=16<22

Wago 751-9301 Firmware=22

Wago 751-9301 Firmware=23

Wago 751-9301

Wago 752-8303\/8000-002 Firmware>=18<22

Wago 752-8303\/8000-002 Firmware=22

and 22 more

● CVE-2022-45137

The configuration backend of the web-based management is vulnerable to reflected XSS (Cross-Site Scripting) attacks that targets the users browser. This leads to a limited impact of confidentiality an...

Wago 751-9301 Firmware>=16<22

Wago 751-9301 Firmware=22

Wago 751-9301 Firmware=23

Wago 751-9301

Wago 752-8303\/8000-002 Firmware>=18<22

Wago 752-8303\/8000-002 Firmware=22

and 22 more

● CVE-2022-45139

A CORS Misconfiguration in the web-based management allows a malicious third party webserver to misuse all basic information pages on the webserver. In combination with CVE-2022-45138 this could lead ...

Wago 751-9301 Firmware>=16<22

Wago 751-9301 Firmware=22

Wago 751-9301 Firmware=23

Wago 751-9301

Wago 752-8303\/8000-002 Firmware>=18<22

Wago 752-8303\/8000-002 Firmware=22

and 22 more

● CVE-2022-3738

WAGO: Missing authentication for config export functionality in multiple products

WAGO PFC100 Firmware>=16<=22

WAGO PFC100

WAGO PFC200 Firmware>=16<=22

WAGO PFC200

Wago Touch Panel 600 Advanced Firmware>=16<=22

Wago Touch Panel 600 Advanced

and 8 more

● CVE-2019-5134

An exploitable regular expression without anchors vulnerability exists in the Web-Based Management (WBM) authentication functionality of WAGO PFC200 versions 03.00.39(12) and 03.01.07(13), and WAGO PF...

WAGO PFC200 Firmware=03.00.39\(12\)

WAGO PFC200 Firmware=03.01.07\(13\)

WAGO PFC200

WAGO PFC100 Firmware=03.00.39\(12\)

WAGO PFC100

● CVE-2019-5149

The WBM web application on firmwares prior to 03.02.02 and 03.01.07 on the WAGO PFC100 and PFC2000, respectively, runs on a lighttpd web server and makes use of the FastCGI module, which is intended t...

WAGO PFC200 Firmware=03.00.39\(12\)

WAGO PFC200 Firmware=03.01.07\(13\)

WAGO PFC200

WAGO PFC100 Firmware=03.00.39\(12\)

WAGO PFC100 Firmware=03.01.07\(13\)

WAGO PFC100

● CVE-2019-5082

An exploitable heap buffer overflow vulnerability exists in the iocheckd service I/O-Check functionality of WAGO PFC200 Firmware version 03.01.07(13), WAGO PFC200 Firmware version 03.00.39(12), and WA...

WAGO PFC200 Firmware=03.00.39\(12\)

WAGO PFC200 Firmware=03.01.07\(13\)

WAGO PFC200

WAGO PFC100 Firmware=03.00.39\(12\)

WAGO PFC100

● CVE-2019-10953

Abb Pm554-tp-eth Firmware

Abb Pm554-tp-eth

Phoenixcontact Ilc 151 Eth Firmware

Phoenixcontact Ilc 151 Eth

Schneider-electric Modicon M221 Firmware<1.10.0.0

Schneider-electric Modicon M221

and 14 more

Latest wago pfc100 firmware Vulnerabilities

Company

Resources

Contact