GCVE - cpe:2.3:o:wago:762-3001_firmware:*:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:o:wago:762-3001_firmware:*:*:*:*:*:*:*:*

part: o version: * update: *

Vendor	Wago (`32ab7757-de27-5378-a269-9c7ac714c35b`)
Product	762 3001 Firmware (`cd662d21-2467-572b-8ede-95f8752952ed`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from gcve-enriched-dumps CVE data

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2018-12981`	vulnerable	2026-06-08 05:10:42.176886	Details available An issue was discovered on WAGO e!DISPLAY 762-3000 through 762-3003 devices with firmware before FW 02. The vulnerability can be exploited by authenticated and unauthenticated users by sending special crafted requests to the web server allowing injecting code within the WBM. The code will be rendered and/or executed in the browser of the user's browser. Published: 2018-07-12T18:00:00.000Z Updated: 2024-08-05T08:52:49.156Z Open on db.gcve.eu Reference links https://cert.vde.com/en-us/advisories/vde-2018-010 https://www.sec-consult.com/en/blog/advisories/remote-code-execution-via-multiple-attack-vectors-in-wago-edisplay/ https://ics-cert.us-cert.gov/advisories/ICSA-18-198-02 https://www.wago.com/medias/SA-WBM-2018-004.pdf?context=bWFzdGVyfHJvb3R8MjgyNzYwfGFwcGxpY2F0aW9uL3BkZnxoMWUvaDg4LzkzNjE3NTIxOTUxMDIucGRmfDU1NmJkYjEzNDY0ZGU4OWQ1OTMyMjUwNTlmZTI0MzgwNDQ1MDY1YzU3OWRmZDk1NzYzODAwMDI3ODg1NDJlZjU https://www.exploit-db.com/exploits/45014/	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2018-12980`	vulnerable	2026-06-08 05:10:42.175874	Details available An issue was discovered on WAGO e!DISPLAY 762-3000 through 762-3003 devices with firmware before FW 02. The vulnerability allows an authenticated user to upload arbitrary files to the file system with the permissions of the web server. Published: 2018-07-12T18:00:00.000Z Updated: 2024-08-05T08:52:49.257Z Open on db.gcve.eu Reference links https://cert.vde.com/en-us/advisories/vde-2018-010 https://www.sec-consult.com/en/blog/advisories/remote-code-execution-via-multiple-attack-vectors-in-wago-edisplay/ https://ics-cert.us-cert.gov/advisories/ICSA-18-198-02 https://www.wago.com/medias/SA-WBM-2018-004.pdf?context=bWFzdGVyfHJvb3R8MjgyNzYwfGFwcGxpY2F0aW9uL3BkZnxoMWUvaDg4LzkzNjE3NTIxOTUxMDIucGRmfDU1NmJkYjEzNDY0ZGU4OWQ1OTMyMjUwNTlmZTI0MzgwNDQ1MDY1YzU3OWRmZDk1NzYzODAwMDI3ODg1NDJlZjU https://www.exploit-db.com/exploits/45014/	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2018-12979`	vulnerable	2026-06-08 05:10:42.172205	Details available An issue was discovered on WAGO e!DISPLAY 762-3000 through 762-3003 devices with firmware before FW 02. Weak permissions allow an authenticated user to overwrite critical files by abusing the unrestricted file upload in the WBM. Published: 2018-07-12T18:00:00.000Z Updated: 2024-08-05T08:52:49.189Z Open on db.gcve.eu Reference links https://cert.vde.com/en-us/advisories/vde-2018-010 https://www.sec-consult.com/en/blog/advisories/remote-code-execution-via-multiple-attack-vectors-in-wago-edisplay/ https://ics-cert.us-cert.gov/advisories/ICSA-18-198-02 https://www.wago.com/medias/SA-WBM-2018-004.pdf?context=bWFzdGVyfHJvb3R8MjgyNzYwfGFwcGxpY2F0aW9uL3BkZnxoMWUvaDg4LzkzNjE3NTIxOTUxMDIucGRmfDU1NmJkYjEzNDY0ZGU4OWQ1OTMyMjUwNTlmZTI0MzgwNDQ1MDY1YzU3OWRmZDk1NzYzODAwMDI3ODg1NDJlZjU https://www.exploit-db.com/exploits/45014/	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.