Product by WAGO
WAGO 750-880 Firmware
26 known vulnerabilities in WAGO 750-880 Firmware (WAGO), 0 of them actively exploited (CISA KEV).
Key figures
26
Vulnerabilities
0
Actively exploited (KEV)
0
Used by ransomware
9
Critical
Vulnerabilities
Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.
| High | CVE-2021-34586 | CODESYS V2 web server: crafted requests could trigger a null pointer dereference (DoS) | 7.5 | |
| High | CVE-2021-34583 | CODESYS V2 web server: crafted requests could trigger a heap-based buffer overflow (DoS) | 7.5 | |
| High | CVE-2021-30186 | CODESYS PLCWinNT: Heap-Based Buffer Overflow | 7.5 | |
| High | CVE-2021-30195 | CODESYS PLCWinNT: Improper Input Validation | 7.5 | |
| Critical | CVE-2019-10712 | Wago 750-330 Firmware: security vulnerability | 9.8 | |
| Medium | CVE-2018-8836 | WAGO 750 Series: Improper Resource Shutdown or Release | 5.3 | |
| Critical | CVE-2021-30190 | CODESYS V2 Web Server: Improper Access Control | 9.8 | |
| High | CVE-2020-12516 | WAGO: PLC families 750-88x and 750-352 prone to DoS attack | 7.5 | |
| Critical | CVE-2021-30188 | CODESYS V2 Runtime System Sp: Stack-Based Buffer Overflow | 9.8 | |
| Critical | CVE-2021-30189 | CODESYS V2 Web Server: Stack-Based Buffer Overflow | 9.8 | |
| Critical | CVE-2021-30192 | CODESYS V2 Web Server: security vulnerability | 9.8 | |
| Critical | CVE-2021-30193 | CODESYS V2 Web Server: Out-of-Bounds Write | 9.8 | |
| Critical | CVE-2021-21001 | WAGO: PFC200 Access to files outside the home directory | 9.1 | |
| Critical | CVE-2021-30194 | CODESYS V2 Web Server: Out-of-Bounds Read | 9.1 | |
| High | CVE-2020-12505 | WAGO: Vulnerability in web-based authentication in WAGO 750-8XX Version <= FW07 | 8.2 | |
| Critical | CVE-2021-34584 | CODESYS V2 web server: crafted requests could trigger a buffer over-read (DoS) | 9.1 | |
| High | CVE-2021-34581 | WAGO: Denial of Service vulnerability inside the OpenSSL implementation | 7.5 | |
| High | CVE-2021-30191 | CODESYS V2 Web Server: security vulnerability | 7.5 | |
| High | CVE-2021-34595 | CODESYS V2 runtime: out-of-bounds read or write access may result in denial-of-service | 8.1 | |
| High | CVE-2021-34585 | CODESYS V2: Unchecked Return Value | 7.5 | |
| Medium | CVE-2018-16210 | WAGO 750-881 Ethernet Controller Devices Firmware 01.08.01(10): Cross-Site Scripting (XSS) | 6.1 | |
| High | CVE-2021-21000 | WAGO: PFC200 Denial of Service due to the number of connections to the runtime | 5.3 | |
| Medium | CVE-2021-34596 | CODESYS V2 runtime: Access of Uninitialized Pointer may result in denial-of-service | 6.5 | |
| Medium | CVE-2023-1620 | WAGO: DoS in multiple products in multiple versions using Codesys | 4.9 | |
| Medium | CVE-2023-1619 | WAGO: DoS in multiple versions of multiple products | 4.9 |