Approved changes feed: RSS · Atom

cpe:2.3:a:wago:pfc100_g2_0750-811x-xxxx-xxxx:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorWago (32ab7757-de27-5378-a269-9c7ac714c35b)
ProductPfc100 G2 0750 811X Xxxx Xxxx (3e181e01-bdd4-5551-b728-f2725433e582)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2025-25265 vulnerable 2026-06-08 07:12:51.065529 Unauthenticated File Read via Web Interface
MEDIUM (4.9)
A web application for configuring the controller is accessible at a specific path. It contains an endpoint that allows a high privileged remote attacker to read files from the system’s file structure.
Published: 2025-06-16T09:46:13.998Z
Updated: 2025-11-21T11:38:18.852Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-25264 vulnerable 2026-06-08 07:12:51.055239 Overly Permissive CORS Policy in WAGO Device Manager
MEDIUM (6.5)
An unauthenticated remote attacker can trick an admin to visit a website containing malicious java script code. The current overly permissive CORS policy allows the attacker to obtain any files from the file system.
Published: 2025-06-16T09:45:31.613Z
Updated: 2025-11-21T11:36:54.281Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-0101 vulnerable 2026-06-08 07:00:29.266558 WAGO: Year 2038 problem
MEDIUM (6.5)
A low privileged user can set the date of the devices to the 19th of January 2038 an therefore exceed the 32-Bit time limit. This causes some functions to work unexpected or stop working at all. Both during runtime and after a restart.
Published: 2025-04-16T07:29:06.441Z
Updated: 2025-04-16T14:40:37.827Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-41974 vulnerable 2026-06-08 06:43:55.793862 WAGO: BACNet Service Property Modification Due to Permission Misconfiguration in Multiple Devices
HIGH (7.1)
A low privileged remote attacker may modify the BACNet service properties due to incorrect permission assignment for critical resources which may lead to a DoS limited to BACNet communication.
Published: 2024-11-18T09:05:32.043Z
Updated: 2025-08-27T21:33:03.186Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-41973 vulnerable 2026-06-08 06:43:55.792805 WAGO: Remote Arbitrary File Write with Root Privileges in multiple Devices
HIGH (8.1)
A low privileged remote attacker can specify an arbitrary file on the filesystem which may lead to an arbitrary file writes with root privileges.
Published: 2024-11-18T09:05:15.892Z
Updated: 2025-08-27T21:33:03.344Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-41972 vulnerable 2026-06-08 06:43:55.791619 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-41971 vulnerable 2026-06-08 06:43:55.790431 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-41970 vulnerable 2026-06-08 06:43:55.789236 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-41969 vulnerable 2026-06-08 06:43:55.787635 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-41968 vulnerable 2026-06-08 06:43:55.776818 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-41967 vulnerable 2026-06-08 06:43:55.760855 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-12650 vulnerable 2026-06-08 06:25:35.831936 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.