Description
In multiple managed switches by WAGO in different versions an attacker may trick a legitimate user to click a link to inject possible malicious code into the Web-Based Management.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| WAGO | 0852-0303 | unspecified – ≤ V1.2.3.S0 | — |
| WAGO | 0852-1305 | unspecified – ≤ V1.1.7.S0 | — |
| WAGO | 0852-1505 | unspecified – ≤ V1.1.6.S0 | — |
| WAGO | 0852-1305/000-001 | unspecified – ≤ V1.0.4.S0 | — |
| WAGO | 0852-1505/000-001 | unspecified – ≤ V1.0.4.S0 | — |
Advisories 2
- VDE-2021-036 PHOENIX CONTACT: Products utilizing WIBU SYSTEMS CodeMeter components in versions prior to V7.21a CERT@VDE · May 14, 2025
- VDE-2021-013 WAGO: Multiple Vulnerabilities in the Web-Based Management Interface CERT@VDE · May 14, 2025