Approved changes feed: RSS · Atom
cpe:2.3:a:wago:0852-1322:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Wago (32ab7757-de27-5378-a269-9c7ac714c35b) |
|---|---|
| Product | 0852 1322 (cbfa2d48-f020-559f-a68f-bb23f4b063ed) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2026-22906 |
vulnerable | 2026-06-08 07:51:14.110725 |
Hardcoded Key Allows Credential Disclosure
CRITICAL (9.8)
User credentials are stored using AES‑ECB encryption with a hardcoded key. An unauthenticated remote attacker obtaining the configuration file can decrypt and recover plaintext usernames and passwords, especially when combined with the authentication bypass.
Published: 2026-02-09T07:40:33.546Z
Updated: 2026-02-09T15:31:17.549Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-22905 |
vulnerable | 2026-06-08 07:51:14.110287 |
Authentication Bypass via URI Traversal
HIGH (7.5)
An unauthenticated remote attacker can bypass authentication by exploiting insufficient URI validation and using path traversal sequences (e.g., /js/../cgi-bin/post.cgi), gaining unauthorized access to protected CGI endpoints and configuration downloads.
Published: 2026-02-09T07:40:17.801Z
Updated: 2026-02-09T15:33:33.687Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-22904 |
vulnerable | 2026-06-08 07:51:14.109815 |
Stack Overflow via Oversized Cookie Fields in lighttpd
CRITICAL (9.8)
Improper length handling when parsing multiple cookie fields (including TRACKID) allows an unauthenticated remote attacker to send oversized cookie values and trigger a stack buffer overflow, resulting in a denial‑of‑service condition and possible remote code execution.
Published: 2026-02-09T07:40:00.484Z
Updated: 2026-02-09T15:34:53.334Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-22903 |
vulnerable | 2026-06-08 07:51:14.108625 |
Stack Overflow via SESSIONID Cookie in lighttpd
CRITICAL (9.8)
An unauthenticated remote attacker can send a crafted HTTP request containing an overly long SESSIONID cookie. This can trigger a stack buffer overflow in the modified lighttpd server, causing it to crash and potentially enabling remote code execution due to missing stack protections.
Published: 2026-02-09T07:39:42.537Z
Updated: 2026-02-09T15:36:36.790Z Reference links |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.