Pfc100 G1 0750 810X/Xxxx Xxxx
Approved changes feed: RSS · Atom
cpe:2.3:a:wago:pfc100_g1_0750-810x/xxxx-xxxx:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Wago (32ab7757-de27-5378-a269-9c7ac714c35b) |
|---|---|
| Product | Pfc100 G1 0750 810X/Xxxx Xxxx (7e3c954e-d002-50cf-ab87-d58db28ab9f4) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2025-25265 |
vulnerable | 2026-06-08 07:12:51.065404 |
Unauthenticated File Read via Web Interface
MEDIUM (4.9)
A web application for configuring the controller is accessible at a specific path. It contains an endpoint that allows a high privileged remote attacker to read files from the system’s file structure.
Published: 2025-06-16T09:46:13.998Z
Updated: 2025-11-21T11:38:18.852Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-25264 |
vulnerable | 2026-06-08 07:12:51.054487 |
Overly Permissive CORS Policy in WAGO Device Manager
MEDIUM (6.5)
An unauthenticated remote attacker can trick an admin to visit a website containing malicious java script code. The current overly permissive CORS policy allows the attacker to obtain any files from the file system.
Published: 2025-06-16T09:45:31.613Z
Updated: 2025-11-21T11:36:54.281Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-0101 |
vulnerable | 2026-06-08 07:00:29.265920 |
WAGO: Year 2038 problem
MEDIUM (6.5)
A low privileged user can set the date of the devices to the 19th of January 2038 an therefore exceed the 32-Bit time limit. This causes some functions to work unexpected or stop working at all. Both during runtime and after a restart.
Published: 2025-04-16T07:29:06.441Z
Updated: 2025-04-16T14:40:37.827Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-41969 |
vulnerable | 2026-06-08 06:43:55.788221 |
WAGO: CODESYS V3 Configuration Authentication Bypass in Multiple Devices
HIGH (8.8)
A low privileged remote attacker may modify the configuration of the CODESYS V3 service through a missing authentication vulnerability which could lead to full system access and/or DoS.
Published: 2024-11-18T09:04:13.691Z
Updated: 2025-01-30T09:21:40.910Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-41968 |
vulnerable | 2026-06-08 06:43:55.786639 |
WAGO: Docker Settings Manipulation in Multiple Devices
MEDIUM (5.4)
A low privileged remote attacker may modify the docker settings setup of the device, leading to a limited DoS.
Published: 2024-11-18T09:03:20.948Z
Updated: 2025-08-27T21:33:03.869Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-41967 |
vulnerable | 2026-06-08 06:43:55.772984 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-12650 |
vulnerable | 2026-06-08 06:25:35.831132 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.