WA
Vendor
Wago
1,551
CVEs
0
On KEV
11
New 30D
Products
079.8
0750-811x-xxxx-xxxx
WAGO
1 CVEs0 on KEV1 new
079.8
0750-821x-xxx-xxx
WAGO
1 CVEs0 on KEV1 new
079.8
0751-9x01
WAGO
1 CVEs0 on KEV1 new
079.8
0752-8303-8000-0002
WAGO
1 CVEs0 on KEV1 new
079.8
0762-340x
WAGO
1 CVEs0 on KEV1 new
079.8
0762-420x-8000-000x
WAGO
1 CVEs0 on KEV1 new
079.8
0762-430x-8000-000x
WAGO
1 CVEs0 on KEV1 new
079.8
0762-520x-8000-000x
WAGO
1 CVEs0 on KEV1 new
079.8
0762-530x-8000-000x
WAGO
1 CVEs0 on KEV1 new
079.8
0762-620x-8000-000x
WAGO
1 CVEs0 on KEV1 new
079.8
0762-630x-8000-000x
WAGO
1 CVEs0 on KEV1 new
PF9.8
Pfc200 Firmware
Wago
40 CVEs0 on KEV0 new
7F9.8
750-8202 Firmware
Wago
27 CVEs0 on KEV0 new
7F9.8
750-831 Firmware
Wago
27 CVEs0 on KEV0 new
7F9.8
750-880 Firmware
Wago
27 CVEs0 on KEV0 new
7F9.8
750-852 Firmware
Wago
26 CVEs0 on KEV0 new
7F9.8
750-881 Firmware
Wago
26 CVEs0 on KEV0 new
7F9.8
750-889 Firmware
Wago
25 CVEs0 on KEV0 new
7F9.8
750-823 Firmware
Wago
24 CVEs0 on KEV0 new
7F9.8
750-829 Firmware
Wago
24 CVEs0 on KEV0 new
7F9.8
750-832 Firmware
Wago
24 CVEs0 on KEV0 new
7F9.8
750-862 Firmware
Wago
24 CVEs0 on KEV0 new
7F9.8
750-8206 Firmware
Wago
23 CVEs0 on KEV0 new
7F9.8
750-8207 Firmware
Wago
23 CVEs0 on KEV0 new
7F9.8
750-8210 Firmware
Wago
23 CVEs0 on KEV0 new
7F9.8
750-8211 Firmware
Wago
23 CVEs0 on KEV0 new
7F9.8
750-8212 Firmware
Wago
23 CVEs0 on KEV0 new
7F9.8
750-8213 Firmware
Wago
23 CVEs0 on KEV0 new
7F9.8
750-8214 Firmware
Wago
23 CVEs0 on KEV0 new
7F9.8
750-8216 Firmware
Wago
23 CVEs0 on KEV0 new
7F9.8
750-8217 Firmware
Wago
23 CVEs0 on KEV0 new
7F9.8
750-882 Firmware
Wago
23 CVEs0 on KEV0 new
7F9.8
750-885 Firmware
Wago
23 CVEs0 on KEV0 new
7F9.8
750-8203 Firmware
Wago
22 CVEs0 on KEV0 new
7F9.8
750-8204 Firmware
Wago
22 CVEs0 on KEV0 new
7F9.8
750-8208 Firmware
Wago
22 CVEs0 on KEV0 new
7F9.8
750-891 Firmware
Wago
22 CVEs0 on KEV0 new
7F9.8
750-890 Firmware
Wago
21 CVEs0 on KEV0 new
7F9.8
750-893 Firmware
Wago
20 CVEs0 on KEV0 new
C08.8
CC100 0751/9x01
WAGO
13 CVEs0 on KEV0 new
EC8.8
Edge Controller 0752-8303/8000-0002
WAGO
13 CVEs0 on KEV0 new
PF9.8
Pfc100 Firmware
Wago
13 CVEs0 on KEV0 new
PG8.8
PFC100 G2 0750-811x-xxxx-xxxx
WAGO
13 CVEs0 on KEV0 new
T08.8
TP600 0762-420x/8000-000x
WAGO
13 CVEs0 on KEV0 new
T08.8
TP600 0762-430x/8000-000x
WAGO
13 CVEs0 on KEV0 new
T08.8
TP600 0762-520x/8000-000x
WAGO
13 CVEs0 on KEV0 new
T08.8
TP600 0762-530x/8000-000x
WAGO
13 CVEs0 on KEV0 new
T08.8
TP600 0762-620x/8000-000x
WAGO
13 CVEs0 on KEV0 new
T08.8
TP600 0762-630x/8000-000x
WAGO
13 CVEs0 on KEV0 new
PG8.8
PFC200 G2 750-821x-xxx-xxx
WAGO
12 CVEs0 on KEV0 new
7F9.8
752-8303/8000-002 Firmware
Wago
9 CVEs0 on KEV0 new
P19.8
Pfc 100 Firmware
Wago
9 CVEs0 on KEV0 new
P29.8
Pfc 200 Firmware
Wago
9 CVEs0 on KEV0 new
TP9.8
Touch Panel 600 Advanced Firmware
Wago
9 CVEs0 on KEV0 new
TP9.8
Touch Panel 600 Marine Firmware
Wago
9 CVEs0 on KEV0 new
TP9.8
Touch Panel 600 Standard Firmware
Wago
9 CVEs0 on KEV0 new
7F9.8
750-8202/000-012 Firmware
Wago
8 CVEs0 on KEV0 new
7F9.8
750-8202/000-022 Firmware
Wago
8 CVEs0 on KEV0 new
PG8.8
PFC200 G2 0750-821x/xxx-xxx
WAGO
8 CVEs0 on KEV0 new
7F9.8
750-8100 Firmware
Wago
7 CVEs0 on KEV0 new
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2025-41753 | 07 0751-9x01 WAGO | 9.8 | Oct 1 | Path traversal in dynamically created BACnet File Objects |
| CVE-2026-4769 | 07 0765-120x/0100-0000 WAGO | 9.8 | Jul 13 | Unauthenticated Access to Internal Diagnostic Interface |
| CVE-2023-5872 | SD Smart Designer Wago | 4.3 | Apr 16 | Wago: Vulnerability in Smart Designer Web-Application |
| CVE-2024-1490 | PG PFC100 G2 (0750-811x-xxxx-xxxx) WAGO | 7.2 | Apr 9 | Wago: Vulnerability in WBM through Open VPN |
| CVE-2026-2328 | SB Solution Builder WAGO | 7.5 | Mar 30 | Backend Access Due to Insufficient Input Validation |
| CVE-2026-3587 | IM Industrial Managed Switch 852-1505 WAGO | 10.0 | Mar 23 | Hidden CLI Function Allows Root Access |
| CVE-2026-22906 | 08 0852-1328 WAGO | 9.8 | Feb 9 | Hardcoded Key Allows Credential Disclosure |
| CVE-2026-22905 | 08 0852-1322 WAGO | 7.5 | Feb 9 | Authentication Bypass via URI Traversal |
| CVE-2026-22904 | 08 0852-1328 WAGO | 9.8 | Feb 9 | Stack Overflow via Oversized Cookie Fields in lighttpd |
| CVE-2026-22903 | 08 0852-1328 WAGO | 9.8 | Feb 9 | Stack Overflow via SESSIONID Cookie in lighttpd |
| CVE-2022-50926 | W7 WAGO 750-8212 PFC200 Wago | 9.8 | Jan 13 | WAGO 750-8212 PFC200 G2 2ETH RS Privilege Escalation |
| CVE-2025-41732 | IN Indsutrial-Managed-Switches WAGO | 9.8 | Dec 10 | Stack-based buffer overflow via unsafe sscanf in check_cookie() |
| CVE-2025-41730 | IN Indsutrial-Managed-Switches WAGO | 9.8 | Dec 10 | Stack-based buffer overflow via unsafe sscanf in check_account() |
| CVE-2025-41716 | SB Solution Builder WAGO | 5.3 | Sep 24 | Unauthenticated User Enumeration via Missing Authentication |
| CVE-2025-41715 | DS Device Sphere WAGO | 9.8 | Sep 24 | Missing Authentication for Database Access in Web Application |
| CVE-2025-41713 | T0 TP600 0762-4306/8000-0001 WAGO | 6.5 | Sep 15 | WAGO: Vulnerability in hardware switch circuit |
| CVE-2025-41664 | C0 Coupler 0750-0362/K013-1080 WAGO | 7.5 | Sep 8 | Improper Permission Handling Enables Unauthorized Access to Firmware and Certificates |
| CVE-2025-41672 | WD Wago Device Sphere WAGO | 10.0 | Jul 7 | WAGO: Vulnerability in WAGO Device Sphere |
| CVE-2025-25265 | T0 TP600 0762-430x/8000-000x WAGO | 4.9 | Jun 16 | Unauthenticated File Read via Web Interface |
| CVE-2025-25264 | PG PFC200 G2 750-821x-xxx-xxx WAGO | 6.5 | Jun 16 | Overly Permissive CORS Policy in WAGO Device Manager |
| CVE-2025-1235 | FM Fully Managed Switches 0852-1505/0000-0001 WAGO | 4.3 | Jun 2 | WAGO: Switches affected by year 2k38 problem |
| CVE-2025-0101 | WE WAGO Edge Controller 0752-8303/8000-0002 WAGO | 6.5 | Apr 16 | WAGO: Year 2038 problem |
| CVE-2024-12650 | T0 TP600 0762-520x/8000-000x WAGO | 5.4 | Mar 5 | Wago: Vulnerability in libwagosnmp |
| CVE-2018-25108 | 7C 750-880 (Controller ETH) WAGO | 7.5 | Jan 16 | WAGO: Denial of service in 750-8xx controller due to uncontrolled resource consumption |
| CVE-2024-41974 | PG PFC100 G2 0750-811x-xxxx-xxxx WAGO | 7.1 | Nov 18 | WAGO: BACNet Service Property Modification Due to Permission Misconfiguration in Multiple Devices |
| CVE-2024-41973 | C0 CC100 0751-9x01 WAGO | 8.1 | Nov 18 | WAGO: Remote Arbitrary File Write with Root Privileges in multiple Devices |
| CVE-2024-41972 | T0 TP600 0762-420x/8000-000x WAGO | 6.5 | Nov 18 | WAGO: Arbitrary File Overwrite Leading to Privileged File Read in Multiple Devices |
| CVE-2024-41971 | C0 CC100 0751-9x01 WAGO | 8.1 | Nov 18 | WAGO: Arbitrary File Overwrite in Multiple Devices |
| CVE-2024-41970 | T0 TP600 0762-630x/8000-000x WAGO | 5.7 | Nov 18 | WAGO: Unauthorized Diagnostic Data Exposure in Multiple Devices |
| CVE-2024-41969 | T0 TP600 0762-420x/8000-000x WAGO | 8.8 | Nov 18 | WAGO: CODESYS V3 Configuration Authentication Bypass in Multiple Devices |
| CVE-2024-41967 | T0 TP600 0762-520x/8000-000x WAGO | 8.1 | Nov 18 | WAGO: Boot Mode Manipulation in Multiple Devices |
| CVE-2024-41968 | T0 TP600 0762-430x/8000-000x WAGO | 5.4 | Nov 18 | WAGO: Docker Settings Manipulation in Multiple Devices |
| CVE-2018-25090 | FC Fieldbus Coupler Ethernet 3rd Generation WAGO | 5.4 | Mar 13 | Wago: Improper Neutralization of Input During Web Page Generation in multiple devices |
| CVE-2015-10123 | CB Controller BACnet MS/TP WAGO | 8.8 | Mar 13 | Wago: Buffer Copy without Checking Size of Input in wbm of multiple products |
| CVE-2023-5188 | TC Telecontrol Configurator Wago | 7.5 | Dec 5 | The MMS Interpreter of WagoAppRTU in versions below 1.4.6.0 which is used by the WAGO Telecontrol Configurator is vulnerable to malformed packets |
| CVE-2023-4149 | 0F 0852-1605 Firmware Wago | 9.8 | Nov 21 | A vulnerability in the web-based management allows an unauthenticated remote attacker to inject arbitrary system commands and gain full system control |
| CVE-2023-3379 | CC Compact Controller 100 Firmware Wago | 5.3 | Nov 20 | Wago web-based management of multiple products has a vulnerability which allows an local authenticated attacker to change the passwords of other non-admin users and thus to… |
| CVE-2023-4089 | TP Touch Panel 600 Advanced Firmware Wago | 2.7 | Oct 17 | On affected Wago products an remote attacker with administrative privileges can access files to which he has already access to through an undocumented local file inclusion |
| CVE-2023-1620 | 7F 750-8202/025-000 Firmware Wago | 4.9 | Jun 26 | Multiple WAGO devices in multiple versions may allow an authenticated remote attacker with high privileges to DoS the device by sending a specifically crafted packet to the… |
| CVE-2023-1619 | 7F 750-8202 Firmware Wago | 4.9 | Jun 26 | Multiple WAGO devices in multiple versions may allow an authenticated remote attacker with high privileges to DoS the device by sending a malformed packet |
| CVE-2023-1150 | 7F 750-890/025-000 Firmware Wago | 7.5 | Jun 26 | Uncontrolled resource consumption in Series WAGO 750-3x/-8x products may allow an unauthenticated remote attacker to DoS the MODBUS server with specially crafted packets |
| CVE-2023-1698 | PF Pfc200 Firmware Wago | 9.8 | May 15 | In multiple products of WAGO a vulnerability allows an unauthenticated, remote attacker to create new users and change the device configuration which can result in unintended… |
| CVE-2022-45140 | 7F 751-9301 Firmware Wago | 9.8 | Feb 27 | The configuration backend allows an unauthenticated user to write arbitrary data with root privileges to the storage, which could lead to unauthenticated remote code execution and… |
| CVE-2022-45139 | TP Touch Panel 600 Advanced Firmware Wago | 5.3 | Feb 27 | A CORS Misconfiguration in the web-based management allows a malicious third party webserver to misuse all basic information pages on the webserver |
| CVE-2022-45138 | PF Pfc200 Firmware Wago | 9.8 | Feb 27 | The configuration backend of the web-based management can be used by unauthenticated users, although only authenticated users should be able to use the API |
| CVE-2022-45137 | 7F 752-8303/8000-002 Firmware Wago | 6.1 | Feb 27 | The configuration backend of the web-based management is vulnerable to reflected XSS (Cross-Site Scripting) attacks that targets the users browser |
| CVE-2022-3843 | 8F 852-111/000-001 Firmware Wago | 9.1 | Feb 16 | In WAGO Unmanaged Switch (852-111/000-001) in firmware version 01 an undocumented configuration interface without authorization allows an remote attacker to read system… |
| CVE-2022-3738 | EC Edge Controller Firmware Wago | 5.9 | Jan 19 | The vulnerability allows a remote unauthenticated attacker to download a backup file, if one exists |
| CVE-2020-12069 | 7F 750-8203 Firmware Wago | 7.8 | Dec 26 | In CODESYS V3 products in all versions prior V3.5.16.0 containing the CmpUserMgr, the CODESYS Control runtime system stores the online communication passwords using a weak hashing… |
| CVE-2021-34569 | 7F 762-6303/8000-002 Firmware Wago | 9.8 | Nov 9 | In WAGO I/O-Check Service in multiple products an attacker can send a specially crafted packet containing OS commands to crash the diagnostic tool and write memory |
| CVE-2021-34568 | 7F 752-8303/8000-002 Firmware Wago | 7.5 | Nov 9 | In WAGO I/O-Check Service in multiple products an unauthenticated remote attacker can send a specially crafted packet containing OS commands to provoke a denial of service |
| CVE-2021-34567 | 7F 762-4101 Firmware Wago | 8.2 | Nov 9 | In WAGO I/O-Check Service in multiple products an unauthenticated remote attacker can send a specially crafted packet containing OS commands to provoke a denial of service and an… |
| CVE-2021-34566 | 7F 750-8102/025-000 Firmware Wago | 9.1 | Nov 9 | In WAGO I/O-Check Service in multiple products an unauthenticated remote attacker can send a specially crafted packet containing OS commands to crash the iocheck process and write… |
| CVE-2022-3281 | 7S 750-82xx/xxx-xxx Series PFC100/PFC200 WAGO | 7.5 | Oct 17 | WAGO: multiple products - Loss of MAC-Address-Filtering after reboot |
| CVE-2022-22511 | 7F 762-5205/8000-001 Firmware Wago | 5.4 | Mar 9 | Various configuration pages of the device are vulnerable to reflected XSS (Cross-Site Scripting) attacks |
| CVE-2021-34596 | 7F 750-881 Firmware Wago | 6.5 | Oct 26 | A crafted request may cause a read access to an uninitialized pointer in CODESYS V2 Runtime Toolkit 32 Bit full and PLCWinNT prior to versions V2.4.7.56, resulting in a… |
| CVE-2021-34595 | 7F 750-832 Firmware Wago | 8.1 | Oct 26 | A crafted request with invalid offsets may cause an out-of-bounds read or write access in CODESYS V2 Runtime Toolkit 32 Bit full and PLCWinNT prior to versions V2.4.7.56,… |
| CVE-2021-34593 | 7F 750-8217 Firmware Wago | 7.5 | Oct 26 | In CODESYS V2 Runtime Toolkit 32 Bit full and PLCWinNT prior to versions V2.4.7.56 unauthenticated crafted invalid requests may result in several denial-of-service conditions |
| CVE-2021-34586 | 7F 750-890 Firmware Wago | 7.5 | Oct 26 | In the CODESYS V2 web server prior to V1.1.9.22 crafted web server requests may cause a Null pointer dereference in the CODESYS web server and may result in a denial-of-service… |
| CVE-2021-34585 | 7F 750-823 Firmware Wago | 7.5 | Oct 26 | In the CODESYS V2 web server prior to V1.1.9.22 crafted web server requests can trigger a parser error |