Product by WAGO
750-891 Firmware
24 known vulnerabilities in 750-891 Firmware (WAGO), 0 of them actively exploited (CISA KEV).
Key figures
24
Vulnerabilities
0
Actively exploited (KEV)
0
Used by ransomware
10
Critical
Vulnerabilities
Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.
| High | CVE-2021-34586 | CODESYS V2 web server: crafted requests could trigger a null pointer dereference (DoS) | 7.5 | |
| High | CVE-2021-34583 | CODESYS V2 web server: crafted requests could trigger a heap-based buffer overflow (DoS) | 7.5 | |
| High | CVE-2021-30186 | CODESYS PLCWinNT: Heap-Based Buffer Overflow | 7.5 | |
| High | CVE-2021-30195 | CODESYS PLCWinNT: Improper Input Validation | 7.5 | |
| Critical | CVE-2021-30190 | CODESYS V2 Web Server: Improper Access Control | 9.8 | |
| Critical | CVE-2020-12506 | WAGO: Authentication Bypass Vulnerability in WAGO 750-36X and WAGO 750-8XX Versions <= FW03 | 9.1 | |
| Critical | CVE-2021-30188 | CODESYS V2 Runtime System Sp: Stack-Based Buffer Overflow | 9.8 | |
| Critical | CVE-2021-30189 | CODESYS V2 Web Server: Stack-Based Buffer Overflow | 9.8 | |
| Critical | CVE-2021-30192 | CODESYS V2 Web Server: security vulnerability | 9.8 | |
| Critical | CVE-2021-30193 | CODESYS V2 Web Server: Out-of-Bounds Write | 9.8 | |
| Critical | CVE-2021-21001 | WAGO: PFC200 Access to files outside the home directory | 9.1 | |
| Critical | CVE-2021-30194 | CODESYS V2 Web Server: Out-of-Bounds Read | 9.1 | |
| Critical | CVE-2021-34584 | CODESYS V2 web server: crafted requests could trigger a buffer over-read (DoS) | 9.1 | |
| Critical | CVE-2021-34578 | WAGO: Authentication Vulnerability in Web-Based Management | 9.8 | |
| High | CVE-2023-1150 | WAGO: Series 750-3x/-8x prone to MODBUS server DoS | 7.5 | |
| High | CVE-2021-30191 | CODESYS V2 Web Server: security vulnerability | 7.5 | |
| High | CVE-2021-34595 | CODESYS V2 runtime: out-of-bounds read or write access may result in denial-of-service | 8.1 | |
| High | CVE-2021-34585 | CODESYS V2: Unchecked Return Value | 7.5 | |
| Medium | CVE-2018-16210 | WAGO 750-881 Ethernet Controller Devices Firmware 01.08.01(10): Cross-Site Scripting (XSS) | 6.1 | |
| High | CVE-2021-21000 | WAGO: PFC200 Denial of Service due to the number of connections to the runtime | 5.3 | |
| Medium | CVE-2021-34596 | CODESYS V2 runtime: Access of Uninitialized Pointer may result in denial-of-service | 6.5 | |
| Medium | CVE-2023-1620 | WAGO: DoS in multiple products in multiple versions using Codesys | 4.9 | |
| Medium | CVE-2023-1619 | WAGO: DoS in multiple versions of multiple products | 4.9 | |
| Medium | CVE-2021-30187 | CODESYS Runtime Toolkit: security vulnerability | 5.3 |