Description
This vulnerability allows an attacker who has access to the WBM to read and write settings-parameters of the device by sending specifically constructed requests without authentication on multiple WAGO PLCs in firmware versions up to FW07.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| WAGO | PLC | 750-362 – ≤ FW07, 750-363 – ≤ FW07, 750-823 – ≤ FW07, 750-832/xxx-xxx – ≤ FW07, 750-862 – ≤ FW07, 750-891 – ≤ FW07, 750-890/xxx-xxx – ≤ FW07, 750-893 – ≤ FW07 | — |
Advisories 1
- VDE-2020-044 WAGO: Web-Based Management Authentication Vulnerability in WAGO 750-36X and WAGO 750-8XX CERT@VDE · May 14, 2025