Latest wago touch panel 600 advanced firmware Vulnerabilities

● CVE-2023-3379

WAGO: Improper Privilege Management in web-based management

Wago Compact Controller 100 Firmware<=25

Wago Compact Controller 100

Wago Edge Controller Firmware<=25

Wago Edge Controller

WAGO PFC100 Firmware<22

WAGO PFC100 Firmware=22

and 14 more

● CVE-2023-4089

On affected Wago products an remote attacker with administrative privileges can access files to which he has already access to through an undocumented local file inclusion. This access is logged in a ...

Wago Compact Controller 100 Firmware>=19<=26

Wago Compact Controller 100

Wago Edge Controller Firmware>=18<=26

Wago Edge Controller

WAGO PFC100 Firmware>=16<=26

WAGO PFC100

and 8 more

● CVE-2022-45138

The configuration backend of the web-based management can be used by unauthenticated users, although only authenticated users should be able to use the API. The vulnerability allows an unauthenticated...

Wago 751-9301 Firmware>=16<22

Wago 751-9301 Firmware=22

Wago 751-9301 Firmware=23

Wago 751-9301

Wago 752-8303\/8000-002 Firmware>=18<22

Wago 752-8303\/8000-002 Firmware=22

and 22 more

● CVE-2022-45139

A CORS Misconfiguration in the web-based management allows a malicious third party webserver to misuse all basic information pages on the webserver. In combination with CVE-2022-45138 this could lead ...

Wago 751-9301 Firmware>=16<22

Wago 751-9301 Firmware=22

Wago 751-9301 Firmware=23

Wago 751-9301

Wago 752-8303\/8000-002 Firmware>=18<22

Wago 752-8303\/8000-002 Firmware=22

and 22 more

● CVE-2022-45140

The configuration backend allows an unauthenticated user to write arbitrary data with root privileges to the storage, which could lead to unauthenticated remote code execution and full system compromi...

Wago 751-9301 Firmware>=16<22

Wago 751-9301 Firmware=22

Wago 751-9301 Firmware=23

Wago 751-9301

Wago 752-8303\/8000-002 Firmware>=18<22

Wago 752-8303\/8000-002 Firmware=22

and 22 more

● CVE-2022-45137

The configuration backend of the web-based management is vulnerable to reflected XSS (Cross-Site Scripting) attacks that targets the users browser. This leads to a limited impact of confidentiality an...

Wago 751-9301 Firmware>=16<22

Wago 751-9301 Firmware=22

Wago 751-9301 Firmware=23

Wago 751-9301

Wago 752-8303\/8000-002 Firmware>=18<22

Wago 752-8303\/8000-002 Firmware=22

and 22 more

● CVE-2022-3738

WAGO: Missing authentication for config export functionality in multiple products

WAGO PFC100 Firmware>=16<=22

WAGO PFC100

WAGO PFC200 Firmware>=16<=22

WAGO PFC200

Wago Touch Panel 600 Advanced Firmware>=16<=22

Wago Touch Panel 600 Advanced

and 8 more

● CVE-2020-12522

The reported vulnerability allows an attacker who has network access to the device to execute code with specially crafted packets in WAGO Series PFC 100 (750-81xx/xxx-xxx), Series PFC 200 (750-82xx/xx...

WAGO PFC 100 Firmware<=10

Wago 750-8101\/025-000

Wago 750-8102\/025-000

WAGO PFC 200 Firmware<=10

Wago 750-8202\/000-012

Wago 750-8202\/000-022

and 36 more

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co

By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.