critical9.8
CVE-2021-34578
This vulnerability allows an attacker who has access to the WBM to read and write settings-parameters of the device by sending specifically constructed request…
Impact
This vulnerability allows an attacker who has access to the WBM to read and write settings-parameters of the device by sending specifically constructed requests without authentication on multiple WAGO PLCs in firmware versions up to FW07.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Wago | 750-890\/040-000 Firmware | through fw07 |
| Wago | 750-890\/025-001 Firmware | through fw07 |
| Wago | 750-890\/025-002 Firmware | through fw07 |
| Wago | 750-890\/025-000 Firmware | through fw07 |
| Wago | 750-832\/000-002 Firmware | through fw07 |
| Wago | 750-362 Firmware | through fw07 |
| Wago | 750-823 Firmware | through fw07 |
| Wago | 750-832 Firmware | through fw07 |
| Wago | 750-363 Firmware | through fw07 |
| Wago | 750-862 Firmware | through fw07 |
| Wago | 750-891 Firmware | through fw07 |
| Wago | 750-893 Firmware | through fw07 |