Vulnerabilities > Wago > 750 890 040 000 Firmware

DATE CVE VULNERABILITY TITLE RISK
2023-06-26 CVE-2023-1150 Resource Exhaustion vulnerability in Wago products
Uncontrolled resource consumption in Series WAGO 750-3x/-8x products may allow an unauthenticated remote attacker to DoS the MODBUS server with specially crafted packets.
network
low complexity
wago CWE-400
7.5
2023-06-26 CVE-2023-1619 Improper Input Validation vulnerability in Wago products
Multiple WAGO devices in multiple versions may allow an authenticated remote attacker with high privileges to DoS the device by sending a malformed packet.
network
low complexity
wago CWE-20
4.9
2023-06-26 CVE-2023-1620 Improper Input Validation vulnerability in Wago products
Multiple WAGO devices in multiple versions may allow an authenticated remote attacker with high privileges to DoS the device by sending a specifically crafted packet to the CODESYS V2 runtime.
network
low complexity
wago CWE-20
4.9
2021-08-31 CVE-2021-34578 Improper Authentication vulnerability in Wago products
This vulnerability allows an attacker who has access to the WBM to read and write settings-parameters of the device by sending specifically constructed requests without authentication on multiple WAGO PLCs in firmware versions up to FW07.
network
wago CWE-287
6.8