Critical severity9.8NVD Advisory· Published Aug 31, 2021· Updated Jun 17, 2026

CVE-2021-34578

Description

This vulnerability allows an attacker who has access to the WBM to read and write settings-parameters of the device by sending specifically constructed requests without authentication on multiple WAGO PLCs in firmware versions up to FW07.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Wago/750 362 Firmware
cpe:2.3:o:wago:750-362_firmware:*:*:*:*:*:*:*:*
Range: <=fw07
Wago/750 363 Firmware
cpe:2.3:o:wago:750-363_firmware:*:*:*:*:*:*:*:*
Range: <=fw07
Wago/750 823 Firmware
cpe:2.3:o:wago:750-823_firmware:*:*:*:*:*:*:*:*
Range: <=fw07
Wago/750 832\/000 002 Firmware
cpe:2.3:o:wago:750-832\/000-002_firmware:*:*:*:*:*:*:*:*
Range: <=fw07
Wago/750 832 Firmware
cpe:2.3:o:wago:750-832_firmware:*:*:*:*:*:*:*:*
Range: <=fw07
Wago/750 862 Firmware
cpe:2.3:o:wago:750-862_firmware:*:*:*:*:*:*:*:*
Range: <=fw07
Wago/750 890\/025 000 Firmware
cpe:2.3:o:wago:750-890\/025-000_firmware:*:*:*:*:*:*:*:*
Range: <=fw07
Wago/750 890\/025 001 Firmware
cpe:2.3:o:wago:750-890\/025-001_firmware:*:*:*:*:*:*:*:*
Range: <=fw07
Wago/750 890\/025 002 Firmware
cpe:2.3:o:wago:750-890\/025-002_firmware:*:*:*:*:*:*:*:*
Range: <=fw07
Wago/750 890\/040 000 Firmware
cpe:2.3:o:wago:750-890\/040-000_firmware:*:*:*:*:*:*:*:*
Range: <=fw07
Wago/750 891 Firmware
cpe:2.3:o:wago:750-891_firmware:*:*:*:*:*:*:*:*
Range: <=fw07
Wago/750 893 Firmware
cpe:2.3:o:wago:750-893_firmware:*:*:*:*:*:*:*:*
Range: <=fw07
Wago/PLCllm-fuzzy2 versions
<FW07+ 1 more
- (no CPE)range: <FW07
- (no CPE)range: 750-362

cvss	0.637
epss	0.001
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000

CVE-2021-34578

Description

AI Insight

Affected products

Patches

Vulnerability mechanics

References

News mentions