Vulnerabilities > Wago

DATE CVE VULNERABILITY TITLE RISK
2018-04-03 CVE-2018-8836 Improper Resource Shutdown or Release vulnerability in Wago products
Wago 750 Series PLCs with firmware version 10 and prior include a remote attack may take advantage of an improper implementation of the 3 way handshake during a TCP connection affecting the communications with commission and service tools.
network
low complexity
wago CWE-404
5.3
2018-02-13 CVE-2018-5459 Improper Authentication vulnerability in Wago Pfc200 Firmware
An Improper Authentication issue was discovered in WAGO PFC200 Series 3S CoDeSys Runtime versions 2.3.X and 2.4.X.
network
low complexity
wago CWE-287
critical
9.8
2017-08-22 CVE-2015-6473 7PK - Security Features vulnerability in Wago 750-849 Firmware and 758-870 Firmware
WAGO IO 750-849 01.01.27 and WAGO IO 750-881 01.02.05 do not contain privilege separation.
network
low complexity
wago CWE-254
critical
9.8
2017-08-22 CVE-2015-6472 Credentials Management vulnerability in Wago products
WAGO IO 750-849 01.01.27 and 01.02.05, WAGO IO 750-881, and WAGO IO 758-870 have weak credential management.
network
low complexity
wago CWE-255
critical
9.8
2017-02-13 CVE-2016-9362 Improper Authentication vulnerability in Wago products
An issue was discovered in WAGO 750-8202/PFC200 prior to FW04 (released August 2015), WAGO 750-881 prior to FW09 (released August 2016), and WAGO 0758-0874-0000-0111.
network
low complexity
wago CWE-287
critical
9.1