VYPR

750 890\/040 000 Firmware

by Wago

CVEs (4)

  • CVE-2021-34578CriAug 31, 2021
    risk 0.64cvss 9.8epss 0.01

    This vulnerability allows an attacker who has access to the WBM to read and write settings-parameters of the device by sending specifically constructed requests without authentication on multiple WAGO PLCs in firmware versions up to FW07.

  • CVE-2023-1150HigJun 26, 2023
    risk 0.49cvss 7.5epss 0.01

    Uncontrolled resource consumption in Series WAGO 750-3x/-8x products may allow an unauthenticated remote attacker to DoS the MODBUS server with specially crafted packets.

  • CVE-2023-1620MedJun 26, 2023
    risk 0.32cvss 4.9epss 0.01

    Multiple WAGO devices in multiple versions may allow an authenticated remote attacker with high privileges to DoS the device by sending a specifically crafted packet to the CODESYS V2 runtime.

  • CVE-2023-1619MedJun 26, 2023
    risk 0.32cvss 4.9epss 0.01

    Multiple WAGO devices in multiple versions may allow an authenticated remote attacker with high privileges to DoS the device by sending a malformed packet.