Skip to content
OpenAdvisories
Critical VDE-2020-028 1 CVE

WAGO: Authentication Bypass Vulnerability in WAGO 750-36X and WAGO 750-8XX Version <= FW03

Published Sep 30, 2020 · Updated May 14, 2025 · Revision 3

Vendor: WAGO Product: 750-362 Product: 750-363 Product: 750-823 Product: 750-832/xxx-xxx Product: 750-862 Product: 750-890/0xx-xxx Product: 750-891

Summary

The Web-Based Management (WBM) of WAGOs programmable logic controller (PLC) is typically used for administration, commissioning and updates.
With special crafted requests it is possible to change some special parameters without authentication.

Details

Impact
This vulnerability allows an attacker who has access to the WBM and knowledge about the directory structure from the WBM to change the parameter setting of the devices by sending specifically constructed requests without authentication.
This can lead to malfunction of the application after reboot.

Mitigation
* Restrict network access to the device.
* Do not directly connect the device to the internet.
* Disable unused TCP/UDP ports.
* Disable web-based management ports 80/443 after the configuration phase

Vulnerabilities 1

  • Critical 9.1
    CVE-2020-12506

    WAGO: Authentication Bypass Vulnerability in WAGO 750-36X and WAGO 750-8XX Versions <= FW03

    Improper Authentication vulnerability in WAGO 750-8XX series with FW version <= FW03 allows an attacker to change the settings of the devices by sending specifically constructed requests without authentication This issue affects: WAGO 750-362, WAGO 750-363, W…

    WAGO 750-823 750-862 750-891 ICS / OT

Revision history

  1. #3

    Fix: added distribution

  2. #2

    Fixed csaf reference URL

  3. #1

    initial revision

References