Suchergebnisse (106)

Zeige nur:
Advisory
VDE-2020-028
14.05.2025 15:00

WAGO: Authentication Bypass Vulnerability in WAGO 750-36X and WAGO 750-8XX Version <= FW03

The Web-Based Management (WBM) of WAGOs programmable logic controller (PLC) is typically used for administration, commissioning and updates. With special crafted requests it is possible to change some special parameters …
Advisory
VDE-2022-002
22.05.2025 15:03

WAGO: Vulnerable WIBU-SYSTEMS Codemeter installed through e!COCKPIT and WAGO-I/O-Pro

A vulnerability is reported in WIBU-SYSTEMS Codemeter. WIBU-SYSTEMS Codemeter is installed by default during e!COCKPIT and WAGO-I/O-Pro (CODESYS 2.3) installations. All currently existing e!COCKPIT installation bundles and WAGO-I/O-Pro (CODESYS 2.3) …
Advisory
VDE-2021-043
14.05.2025 14:28

WAGO: Vulnerable WIBU-SYSTEMS Codemeter installed through e!COCKPIT and WAGO-I/O-Pro

Multiple vulnerabilities were reported in WIBU-SYSTEMS Codemeter. WIBU-SYSTEMS Codemeter is installed by default during e!COCKPIT and WAGO-I/O-Pro (CODESYS 2.3) installations. All currently existing e!COCKPIT installation bundles and WAGO-I/O-Pro (CODESYS 2.3) …
Advisory
VDE-2020-027
14.05.2025 14:28

WAGO: Vulnerability in web-based authentication in WAGO 750-8XX Version <= FW07

The Web-Based Management (WBM) of WAGOs programmable logic controller (PLC) is typically used for administration, commissioning and updates. With special crafted requests it is possible to change some special parameters …
Advisory
VDE-2020-044
14.05.2025 15:00

WAGO: Web-Based Management Authentication Vulnerability in WAGO 750-36X and WAGO 750-8XX

The Web-Based Management (WBM) of WAGOs programmable logic controller (PLC) is typically used for administration, commissioning and updates. With special crafted requests it is possible to read and write some …
Advisory
VDE-2022-042
17.10.2022 10:00

WAGO: Multiple products - Loss of MAC-Address-Filtering after reboot

The MAC address filter as part of the firewall has a flaw, which prevents the MAC address filter to be active after restart. In this way a remote attacker is …
Advisory
VDE-2024-007
22.01.2024 08:00

WAGO: WIBU-SYSTEMS CodeMeter Runtime vulnerabilities in multiple products

A heap-based buffer overflow caused by libcurl and wrong whitespace character interpretation in Javascript, both used in CodeMeter Runtime affecting multiple products by WAGO. WIBU-SYSTEMS Codemeter is installed by default …
Advisory
VDE-2022-009
22.05.2025 15:03

WAGO: Multiple Products affected by Linux Kernel Vulnerability Dirty Pipe

The Linux kernel starting from 5.8 has a flaw which can lead to privilege escalation for a local user. The kernel is used in several Versions of the FW of …