Most recent entries from all

bdu:2023-03091

EUVD-2026-211620

fkie_cve-2023-1698

In multiple products of WAGO a vulnerability allows an unauthenticated, remote attacker to create new users and change the device configuration which can result in unintended behaviour, Denial of Service and full system compromise.

GHSA-vf3g-hqqf-r379

gsd-2023-1698

VDE-2023-007 — WAGO: Unauthenticated command execution via Web-based-management UPDATE A

The 'legal information' plugin of web-based-management contained a vulnerability which allowed execution of arbitrary commands with privileges of www user. UPDATE A 15.06.2023 :

Removed PFC100 with FW23 as affected product and from solution PFC200 with FW23 is only affected on 750-821x/xxx-xxx Renamed "FW22 Patch 1" to "FW22 SP1" to match the versions of the download portal

VDE-2024-054 — Endress+Hauser: Netilion Network Insights is affected by multiple vulnerabilities

Several vulnerabilities have been identified in the web-based management of WAGO devices utilized in Endress+Hauser IoT solutions. WAGO has provided fixes for these vulnerabilities, which have been integrated into the solutions by Endress+Hauser. Additionally, a guideline on secure operation of these solutions has been made available.