Approved changes feed: RSS · Atom

cpe:2.3:h:wago:762-4306\/8000-002:-:*:*:*:*:*:*:*

part: h version: - update: *

VendorWago (32ab7757-de27-5378-a269-9c7ac714c35b)
Product762 4306/8000 002 (6510ea76-96c5-5375-87b0-eac98f49773e)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2022-22511 not_vulnerable 2026-06-08 05:40:54.001522 WAGO PLCs WBM vulnerable to reflected XSS
MEDIUM (5.4)
Various configuration pages of the device are vulnerable to reflected XSS (Cross-Site Scripting) attacks. An authorized attacker with user privileges may use this to gain access to confidential information on a PC that connects to the WBM after it has been compromised.
Published: 2022-03-09T19:38:43.516Z
Updated: 2024-09-17T00:16:00.059Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-34569 not_vulnerable 2026-06-08 05:32:14.004337 WAGO I/O-Check Service prone to Out-of-bounds Write
CRITICAL (9.8)
In WAGO I/O-Check Service in multiple products an attacker can send a specially crafted packet containing OS commands to crash the diagnostic tool and write memory.
Published: 2022-11-09T15:17:36.366Z
Updated: 2025-05-01T19:17:39.712Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-34568 not_vulnerable 2026-06-08 05:32:13.994959 WAGO I/O-Check Service prone to Allocation of Resources Without Limits or Throttling
HIGH (7.5)
In WAGO I/O-Check Service in multiple products an unauthenticated remote attacker can send a specially crafted packet containing OS commands to provoke a denial of service.
Published: 2022-11-09T15:17:29.795Z
Updated: 2025-05-01T14:20:17.218Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-34567 not_vulnerable 2026-06-08 05:32:13.984697 WAGO I/O-Check Service prone to Out-of-bounds Read
HIGH (8.2)
In WAGO I/O-Check Service in multiple products an unauthenticated remote attacker can send a specially crafted packet containing OS commands to provoke a denial of service and an limited out-of-bounds read.
Published: 2022-11-09T15:17:23.429Z
Updated: 2025-05-01T14:20:39.270Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-34566 not_vulnerable 2026-06-08 05:32:13.913265 WAGO I/O-Check Service prone to Memory Overflow
CRITICAL (9.1)
In WAGO I/O-Check Service in multiple products an unauthenticated remote attacker can send a specially crafted packet containing OS commands to crash the iocheck process and write memory resulting in loss of integrity and DoS.
Published: 2022-11-09T15:17:14.172Z
Updated: 2025-05-01T14:21:10.643Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-12069 not_vulnerable 2026-06-08 05:17:56.397297 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.