Skip to content
OpenAdvisories

Product · WAGO

Compact Controller 100

0 known vulnerabilities.

Compact Controller 100 at a glance

Last 12 months
0
Critical · all time
0
Exploited · all time
0
Public exploit · all time
0
New vulnerabilities per month · last 12 months
0 1 1 December 2025: 0 vulnerabilities Dec 2025 January 2026: 0 vulnerabilities February 2026: 0 vulnerabilities March 2026: 0 vulnerabilities Mar April 2026: 0 vulnerabilities May 2026: 0 vulnerabilities June 2026: 0 vulnerabilities Jun July 2026: 0 vulnerabilities August 2026: 0 vulnerabilities September 2026: 0 vulnerabilities Sep October 2026: 0 vulnerabilities November 2026: 0 vulnerabilities
Show as table
MonthVulnerabilitiesCritical
Nov 202600
Oct 202600
Sep 202600
Aug 202600
Jul 202600
Jun 202600
May 202600
Apr 202600
Mar 202600
Feb 202600
Jan 202600
Dec 202500
Nov 202500
Oct 202500
Sep 202500
Aug 202500
Jul 202500
Jun 202500
May 202500
Apr 202500
Mar 202500
Feb 202500
Jan 202500
Dec 202400

Latest advisories

  • High max 8.8
    VDE-2023-026 16 CVEs rev. 2

    WAGO: Multiple products prone to multiple vulnerabilities in e!Runtime / CODESYS V3 Runtime

    Multiple WAGO devices are prone to vulnerabilites in the used CODESYS V3 framework.

    first Jul 31, 2023
  • Critical max 9.8
    VDE-2023-007 1 CVE rev. 2

    WAGO: Unauthenticated command execution via Web-based-management UPDATE A

    The 'legal information' plugin of web-based-management contained a vulnerability which allowed execution of arbitrary commands with privileges of www user. UPDATE A 15.06.2023 : Removed PFC100 with FW23 as affected product and from solution PFC200 with FW23 i…

    first May 15, 2023
  • High max 7.3
    VDE-2023-068 17 CVEs

    WAGO: Multiple Vulnerabilities in e!Cockpit and e!Runtime / CODESYS Runtime

    The following vulnerabilities are published with reference to CODESYS Advisory 2023-05, CODESYS Advisory 2023-06 and CODESYS Advisory 2023-09

  • Medium max 5.3
    VDE-2023-015 1 CVE

    WAGO: Improper privilege management in web-based management

    There is a misconfiguration of access rights to a configuration tool of the web-based-management for a specific user, which allows to reset passwords of other users (except root). This allows an authenticated attacker to elevate his privileges.

  • Critical max 9.8
    VDE-2022-060 4 CVEs

    WAGO: Multiple vulnerabilities in web-based management of multiple products

    The Web-Based Management (WBM) of WAGOs programmable logic controller (PLC) is typically used for administration, commissioning and updates. The configuration backend can in some cases be used without authentication and to write data with root privileges. Add…

0 results · Feed

Nothing found.