Skip to content
CVE PROGRAM SOURCE RECORD9.8 Critical

CVE-2021-34578

WAGO: Authentication Vulnerability in Web-Based Management

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
CERTVDE

Description

This vulnerability allows an attacker who has access to the WBM to read and write settings-parameters of the device by sending specifically constructed requests without authentication on multiple WAGO PLCs in firmware versions up to FW07.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

WAGO PLC

  • 750-362 to ≤ FW07affected
  • 750-363 to ≤ FW07affected
  • 750-823 to ≤ FW07affected
  • 750-832/xxx-xxx to ≤ FW07affected
  • 750-862 to ≤ FW07affected
  • 750-891 to ≤ FW07affected
  • 750-890/xxx-xxx to ≤ FW07affected
  • 750-893 to ≤ FW07affected

References