Skip to content
CVE PROGRAM SOURCE RECORD10.0 Critical

CVE-2020-12522

Command Injection Vulnerability in I/O-Check Service of WAGO PFC100, PFC200 and Touch Panel 600 Series with firmware versions <=FW10

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
CERTVDE

Description

The reported vulnerability allows an attacker who has network access to the device to execute code with specially crafted packets in WAGO Series PFC 100 (750-81xx/xxx-xxx), Series PFC 200 (750-82xx/xxx-xxx), Series Wago Touch Panel 600 Standard Line (762-4xxx), Series Wago Touch Panel 600 Advanced Line (762-5xxx), Series Wago Touch Panel 600 Marine Line (762-6xxx) with firmware versions <=FW10.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

WAGO Series PFC 100 (750-81xx/xxx-xxx)

  • FW1 to ≤ FW10affected

WAGO Series PFC 200 (750-82xx/xxx-xxx)

  • FW1 to ≤ FW10affected

WAGO Series Wago Touch Panel 600 Standard Line (762-4xxx)

  • FW1 to ≤ FW10affected

WAGO Series Wago Touch Panel 600 Advanced Line (762-5xxx)

  • FW1 to ≤ FW10affected

WAGO Series Wago Touch Panel 600 Marine Line (762-6xxx)

  • FW1 to ≤ FW10affected

References