WAGO kayıtları
wago üreticisine ait 115 yayımlanmış kayıt.
Araştırmacı profili
- KEV’e giren
- 0 · %0
- Silahlaştırılmış
- 0 · %0
- Pre-auth RCE
- 8
- Düzeltme kaydı olan
- %3,5
- Yayından KEV’e ortanca
- KEV’e giren kayıt yok
Tekrar eden sınıflar
- CWE-787 Out-of-bounds Write19
- CWE-78 Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')16
- CWE-306 Missing Authentication for Critical Function10
- CWE-798 Use of Hard-coded Credentials5
- CWE-120 Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')5
- CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')5
Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.
CWETüm kayıtlar
115 kayıt| Aksiyon | CVE | Zafiyet | Ciddiyet | KEV | EPSS | Yayın |
|---|---|---|---|---|---|---|
64Bu hafta | CVE-2023-1698Kavram kanıtı | WAGO: WBM Command Injection in multiple productswago · compact controller 100 firmware · CWE-78 | Kritik9,8 | — | %82,0 | 15 May 2023 |
45Planlayın | CVE-2020-8597Kavram kanıtı | eap.c in pppd in ppp 2.4.2 through 2.4.8 has an rhostname buffer overflow in the eap_request and eap_response functions.point-to-point protocol project · point-to-point protocol · CWE-120 | Kritik9,8 | — | %19,9 | 3 Şub 2020 |
44Planlayın | CVE-2018-12980Kavram kanıtı | An issue was discovered on WAGO e!DISPLAY 762-3000 through 762-3003 devices with firmware before FW 02.wago · 762-3000 firmware · CWE-434 | Yüksek8,8 | — | %29,8 | 12 Tem 2018 |
41Planlayın | CVE-2012-4879İstismar yok | The Linux Console on the WAGO I/O System 758 model 758-870, 758-874, 758-875, and 758-876 Industrial PC (IPC) devices has a default passwordwago · wago i\/o system 758 industrial pc device · CWE-255 | Kritik10,0 | — | %3,2 | 6 Eyl 2012 |
41Planlayın | CVE-2012-3013İstismar yok | WAGO I/O System 758 model 758-870, 758-874, 758-875, and 758-876 Industrial PC (IPC) devices have default passwords for unspecified Web Basewago · wago i\/o system 758 industrial pc device · CWE-255 | Kritik10,0 | — | %3,2 | 6 Eyl 2012 |
40Planlayın | CVE-2019-5081İstismar yok | An exploitable heap buffer overflow vulnerability exists in the iocheckd service ''I/O-Chec'' functionality of WAGO PFC 200 Firmware versionwago · pfc 200 firmware · CWE-787 | Kritik9,8 | — | %4,5 | 18 Ara 2019 |
40Planlayın | CVE-2019-5075İstismar yok | An exploitable stack buffer overflow vulnerability exists in the command line utility getcouplerdetails of WAGO PFC200 Firmware versions 03.wago · pfc 200 firmware · CWE-787 | Kritik9,8 | — | %3,9 | 18 Ara 2019 |
40Planlayın | CVE-2015-6473İstismar yok | WAGO IO 750-849 01.01.27 and WAGO IO 750-881 01.02.05 do not contain privilege separation.wago · 750-849 firmware · CWE-254 | Kritik9,8 | — | %3,5 | 22 Ağu 2017 |
40Planlayın | CVE-2019-5079İstismar yok | An exploitable heap buffer overflow vulnerability exists in the iocheckd service "I/O-Check" functionality of WAGO PFC200 Firmware versions wago · pfc 200 firmware · CWE-787 | Kritik9,8 | — | %3,3 | 18 Ara 2019 |
40Planlayın | CVE-2019-5082İstismar yok | An exploitable heap buffer overflow vulnerability exists in the iocheckd service I/O-Check functionality of WAGO PFC200 Firmware version 03.wago · pfc200 firmware · CWE-787 | Kritik9,8 | — | %3,3 | 8 Oca 2020 |
40Planlayın | CVE-2019-5074İstismar yok | An exploitable stack buffer overflow vulnerability exists in the iocheckd service ''I/O-Check'' functionality of WAGO PFC200 Firmware versiowago · pfc 200 firmware · CWE-787 | Kritik9,8 | — | %3,3 | 18 Ara 2019 |
40Planlayın | CVE-2019-12549İstismar yok | WAGO 852-303 before FW06, 852-1305 before FW06, and 852-1505 before FW03 devices contain hardcoded private keys for the SSH daemon.wago · 852-303 firmware · CWE-798 | Kritik9,8 | — | %3,3 | 17 Haz 2019 |
40Planlayın | CVE-2020-12522İstismar yok | Command Injection Vulnerability in I/O-Check Service of WAGO PFC100, PFC200 and Touch Panel 600 Series with firmware versions <=FW10wago · pfc 100 firmware · CWE-78 | Kritik9,8 | — | %3,1 | 17 Ara 2020 |
40Planlayın | CVE-2015-6472İstismar yok | WAGO IO 750-849 01.01.27 and 01.02.05, WAGO IO 750-881, and WAGO IO 758-870 have weak credential management.wago · 750-849 firmware · CWE-255 | Kritik9,8 | — | %2,9 | 22 Ağu 2017 |
40Planlayın | CVE-2019-10712İstismar yok | The Web-GUI on WAGO Series 750-88x (750-330, 750-352, 750-829, 750-831, 750-852, 750-880, 750-881, 750-882, 750-884, 750-885, 750-889) and Swago · 750-830 firmware · CWE-798 | Kritik9,8 | — | %2,8 | 7 May 2019 |
40Planlayın | CVE-2019-12550İstismar yok | WAGO 852-303 before FW06, 852-1305 before FW06, and 852-1505 before FW03 devices contain hardcoded users and passwords that can be used to lwago · 852-303 firmware · CWE-798 | Kritik9,8 | — | %2,7 | 17 Haz 2019 |
40Planlayın | CVE-2018-5459İstismar yok | An Improper Authentication issue was discovered in WAGO PFC200 Series 3S CoDeSys Runtime versions 2.3.X and 2.4.X.wago · pfc200 firmware · CWE-287 | Kritik9,8 | — | %2,7 | 13 Şub 2018 |
39İzleyin | CVE-2021-30190İstismar yok | CODESYS V2 Web-Server before 1.1.9.20 has Improper Access Control.codesys · v2 web server · CWE-306 | Kritik9,8 | — | %1,4 | 25 May 2021 |
39İzleyin | CVE-2021-30189İstismar yok | CODESYS V2 Web-Server before 1.1.9.20 has a Stack-based Buffer Overflow.codesys · v2 web server · CWE-787 | Kritik9,8 | — | %1,3 | 25 May 2021 |
39İzleyin | CVE-2021-30188İstismar yok | CODESYS V2 runtime system SP before 2.4.7.55 has a Stack-based Buffer Overflow.codesys · v2 runtime system sp · CWE-787 | Kritik9,8 | — | %1,3 | 25 May 2021 |
39İzleyin | CVE-2021-30193İstismar yok | CODESYS V2 Web-Server before 1.1.9.20 has an Out-of-bounds Write.codesys · v2 web server · CWE-787 | Kritik9,8 | — | %1,2 | 25 May 2021 |
39İzleyin | CVE-2021-30192İstismar yok | CODESYS V2 Web-Server before 1.1.9.20 has an Improperly Implemented Security Check.codesys · v2 web server | Kritik9,8 | — | %1,2 | 25 May 2021 |
39İzleyin | CVE-2023-4149İstismar yok | WAGO: OS Command Injection Vulnerability in Managed Switchwago · 0852-0602 firmware · CWE-78 | Kritik9,8 | — | %1,1 | 21 Kas 2023 |
39İzleyin | CVE-2021-20998İstismar yok | WAGO: Managed Switches: Unauthorized creation of user accountswago · 0852-0303 firmware · CWE-306 | Kritik9,8 | — | %1,1 | 13 May 2021 |
39İzleyin | CVE-2022-45140İstismar yok | WAGO: Missing Authentication for Critical Functionwago · 751-9301 firmware · CWE-306 | Kritik9,8 | — | %1,1 | 27 Şub 2023 |
- CVE-2023-169864Bu hafta
WAGO: WBM Command Injection in multiple products
KritikCVSS 9,8Kavram kanıtıEPSS %82wago · compact controller 100 firmware15 May 2023
- CVE-2020-859745Planlayın
eap.c in pppd in ppp 2.4.2 through 2.4.8 has an rhostname buffer overflow in the eap_request and eap_response functions.
KritikCVSS 9,8Kavram kanıtıEPSS %20point-to-point protocol project · point-to-point protocol3 Şub 2020
- CVE-2018-1298044Planlayın
An issue was discovered on WAGO e!DISPLAY 762-3000 through 762-3003 devices with firmware before FW 02.
YüksekCVSS 8,8Kavram kanıtıEPSS %30wago · 762-3000 firmware12 Tem 2018
- CVE-2012-487941Planlayın
The Linux Console on the WAGO I/O System 758 model 758-870, 758-874, 758-875, and 758-876 Industrial PC (IPC) devices has a default password
KritikCVSS 10,0İstismar yokEPSS %3wago · wago i\/o system 758 industrial pc device6 Eyl 2012
- CVE-2012-301341Planlayın
WAGO I/O System 758 model 758-870, 758-874, 758-875, and 758-876 Industrial PC (IPC) devices have default passwords for unspecified Web Base
KritikCVSS 10,0İstismar yokEPSS %3wago · wago i\/o system 758 industrial pc device6 Eyl 2012
- CVE-2019-508140Planlayın
An exploitable heap buffer overflow vulnerability exists in the iocheckd service ''I/O-Chec'' functionality of WAGO PFC 200 Firmware version
KritikCVSS 9,8İstismar yokEPSS %5wago · pfc 200 firmware18 Ara 2019
- CVE-2019-507540Planlayın
An exploitable stack buffer overflow vulnerability exists in the command line utility getcouplerdetails of WAGO PFC200 Firmware versions 03.
KritikCVSS 9,8İstismar yokEPSS %4wago · pfc 200 firmware18 Ara 2019
- CVE-2015-647340Planlayın
WAGO IO 750-849 01.01.27 and WAGO IO 750-881 01.02.05 do not contain privilege separation.
KritikCVSS 9,8İstismar yokEPSS %4wago · 750-849 firmware22 Ağu 2017
- CVE-2019-507940Planlayın
An exploitable heap buffer overflow vulnerability exists in the iocheckd service "I/O-Check" functionality of WAGO PFC200 Firmware versions
KritikCVSS 9,8İstismar yokEPSS %3wago · pfc 200 firmware18 Ara 2019
- CVE-2019-508240Planlayın
An exploitable heap buffer overflow vulnerability exists in the iocheckd service I/O-Check functionality of WAGO PFC200 Firmware version 03.
KritikCVSS 9,8İstismar yokEPSS %3wago · pfc200 firmware8 Oca 2020
- CVE-2019-507440Planlayın
An exploitable stack buffer overflow vulnerability exists in the iocheckd service ''I/O-Check'' functionality of WAGO PFC200 Firmware versio
KritikCVSS 9,8İstismar yokEPSS %3wago · pfc 200 firmware18 Ara 2019
- CVE-2019-1254940Planlayın
WAGO 852-303 before FW06, 852-1305 before FW06, and 852-1505 before FW03 devices contain hardcoded private keys for the SSH daemon.
KritikCVSS 9,8İstismar yokEPSS %3wago · 852-303 firmware17 Haz 2019
- CVE-2020-1252240Planlayın
Command Injection Vulnerability in I/O-Check Service of WAGO PFC100, PFC200 and Touch Panel 600 Series with firmware versions <=FW10
KritikCVSS 9,8İstismar yokEPSS %3wago · pfc 100 firmware17 Ara 2020
- CVE-2015-647240Planlayın
WAGO IO 750-849 01.01.27 and 01.02.05, WAGO IO 750-881, and WAGO IO 758-870 have weak credential management.
KritikCVSS 9,8İstismar yokEPSS %3wago · 750-849 firmware22 Ağu 2017
- CVE-2019-1071240Planlayın
The Web-GUI on WAGO Series 750-88x (750-330, 750-352, 750-829, 750-831, 750-852, 750-880, 750-881, 750-882, 750-884, 750-885, 750-889) and S
KritikCVSS 9,8İstismar yokEPSS %3wago · 750-830 firmware7 May 2019
- CVE-2019-1255040Planlayın
WAGO 852-303 before FW06, 852-1305 before FW06, and 852-1505 before FW03 devices contain hardcoded users and passwords that can be used to l
KritikCVSS 9,8İstismar yokEPSS %3wago · 852-303 firmware17 Haz 2019
- CVE-2018-545940Planlayın
An Improper Authentication issue was discovered in WAGO PFC200 Series 3S CoDeSys Runtime versions 2.3.X and 2.4.X.
KritikCVSS 9,8İstismar yokEPSS %3wago · pfc200 firmware13 Şub 2018
- CVE-2021-3019039İzleyin
CODESYS V2 Web-Server before 1.1.9.20 has Improper Access Control.
KritikCVSS 9,8İstismar yokEPSS %1codesys · v2 web server25 May 2021
- CVE-2021-3018939İzleyin
CODESYS V2 Web-Server before 1.1.9.20 has a Stack-based Buffer Overflow.
KritikCVSS 9,8İstismar yokEPSS %1codesys · v2 web server25 May 2021
- CVE-2021-3018839İzleyin
CODESYS V2 runtime system SP before 2.4.7.55 has a Stack-based Buffer Overflow.
KritikCVSS 9,8İstismar yokEPSS %1codesys · v2 runtime system sp25 May 2021
- CVE-2021-3019339İzleyin
CODESYS V2 Web-Server before 1.1.9.20 has an Out-of-bounds Write.
KritikCVSS 9,8İstismar yokEPSS %1codesys · v2 web server25 May 2021
- CVE-2021-3019239İzleyin
CODESYS V2 Web-Server before 1.1.9.20 has an Improperly Implemented Security Check.
KritikCVSS 9,8İstismar yokEPSS %1codesys · v2 web server25 May 2021
- CVE-2023-414939İzleyin
WAGO: OS Command Injection Vulnerability in Managed Switch
KritikCVSS 9,8İstismar yokEPSS %1wago · 0852-0602 firmware21 Kas 2023
- CVE-2021-2099839İzleyin
WAGO: Managed Switches: Unauthorized creation of user accounts
KritikCVSS 9,8İstismar yokEPSS %1wago · 0852-0303 firmware13 May 2021
- CVE-2022-4514039İzleyin
WAGO: Missing Authentication for Critical Function
KritikCVSS 9,8İstismar yokEPSS %1wago · 751-9301 firmware27 Şub 2023