Approved changes feed: RSS · Atom

cpe:2.3:o:wago:750-8202\/025-001_firmware:*:*:*:*:*:*:*:*

part: o version: * update: *

VendorWago (32ab7757-de27-5378-a269-9c7ac714c35b)
Product750 8202/025 001 Firmware (67305f49-249e-5aa4-a4df-5467b71e7ef6)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2023-1620 vulnerable 2026-06-08 05:52:36.375201 WAGO: DoS in multiple products in multiple versions using Codesys
MEDIUM (4.9)
Multiple WAGO devices in multiple versions may allow an authenticated remote attacker with high privileges to DoS the device by sending a specifically crafted packet to the CODESYS V2 runtime.
Published: 2023-06-26T06:19:30.928Z
Updated: 2024-11-12T14:11:36.673Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-1619 vulnerable 2026-06-08 05:52:36.240733 WAGO: DoS in multiple versions of multiple products
MEDIUM (4.9)
Multiple WAGO devices in multiple versions may allow an authenticated remote attacker with high privileges to DoS the device by sending a malformed packet.
Published: 2023-06-26T06:18:33.981Z
Updated: 2024-10-02T05:28:23.250Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-22511 vulnerable 2026-06-08 05:40:54.024072 WAGO PLCs WBM vulnerable to reflected XSS
MEDIUM (5.4)
Various configuration pages of the device are vulnerable to reflected XSS (Cross-Site Scripting) attacks. An authorized attacker with user privileges may use this to gain access to confidential information on a PC that connects to the WBM after it has been compromised.
Published: 2022-03-09T19:38:43.516Z
Updated: 2024-09-17T00:16:00.059Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-34569 vulnerable 2026-06-08 05:32:14.001416 WAGO I/O-Check Service prone to Out-of-bounds Write
CRITICAL (9.8)
In WAGO I/O-Check Service in multiple products an attacker can send a specially crafted packet containing OS commands to crash the diagnostic tool and write memory.
Published: 2022-11-09T15:17:36.366Z
Updated: 2025-05-01T19:17:39.712Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-34568 vulnerable 2026-06-08 05:32:13.991239 WAGO I/O-Check Service prone to Allocation of Resources Without Limits or Throttling
HIGH (7.5)
In WAGO I/O-Check Service in multiple products an unauthenticated remote attacker can send a specially crafted packet containing OS commands to provoke a denial of service.
Published: 2022-11-09T15:17:29.795Z
Updated: 2025-05-01T14:20:17.218Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-34567 vulnerable 2026-06-08 05:32:13.980805 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-34566 vulnerable 2026-06-08 05:32:13.844286 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.