Login Request a demo
7F
Product
752-8303/8000-002 Firmware
by Wago · last CVE Feb 27, 2023
9
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Vulnerabilities9In the news0Timeline
Severity mix
Critical 4High 2Medium 3Low 0
Severity
All severities9Critical4High2Medium3Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add 752-8303/8000-002 Firmware to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2022-45140
9.8
1%
Feb 27
The configuration backend allows an unauthenticated user to write arbitrary data with root privileges to the storage, which could lead to unauthenticated remote code execution and…
Affected: 18 before 22; 22; 23
CVE-2022-45138
9.8
1%
Feb 27
The configuration backend of the web-based management can be used by unauthenticated users, although only authenticated users should be able to use the API
Affected: 18 before 22; 22; 23
CVE-2021-34569
9.8
1%
Nov 9
In WAGO I/O-Check Service in multiple products an attacker can send a specially crafted packet containing OS commands to crash the diagnostic tool and write memory
Affected: before 18; 18; 18; 18
CVE-2021-34566
9.1
1%
Nov 9
In WAGO I/O-Check Service in multiple products an unauthenticated remote attacker can send a specially crafted packet containing OS commands to crash the iocheck process and write…
Affected: before 18; 18; 18; 18
CVE-2021-34567
8.2
1%
Nov 9
In WAGO I/O-Check Service in multiple products an unauthenticated remote attacker can send a specially crafted packet containing OS commands to provoke a denial of service and an…
Affected: before 18; 18; 18; 18
CVE-2021-34568
7.5
1%
Nov 9
In WAGO I/O-Check Service in multiple products an unauthenticated remote attacker can send a specially crafted packet containing OS commands to provoke a denial of service
Affected: before 18; 18; 18; 18
CVE-2022-45137
6.1
0%
Feb 27
The configuration backend of the web-based management is vulnerable to reflected XSS (Cross-Site Scripting) attacks that targets the users browser
Affected: 18 before 22; 22; 23
CVE-2022-22511
5.4
0%
Mar 9
Various configuration pages of the device are vulnerable to reflected XSS (Cross-Site Scripting) attacks
Affected: fw16 before fw22
CVE-2022-45139
5.3
0%
Feb 27
A CORS Misconfiguration in the web-based management allows a malicious third party webserver to misuse all basic information pages on the webserver
Affected: 18 before 22; 22; 23
Showing 9