Most recent entries from csaf_wagogmbhcokg

VDE-2025-102 — WAGO: Multiple Devices are affected by a Vulnerability in BACnet IP Stack

Thu, 01 Oct 2026 10:00:00 +0000

Multiple WAGO devices are affected by a vulnerability in the dynamic creation of BACnet File Objects. The object name is used as a file path without sufficient validation and is not restricted to the intended directory, so relative paths can be used to reach files elsewhere in the file system.

VDE-2025-081 — WAGO: Multiple PLCs and Communication Components are Affected by multiple Vulnerabilities leading to RCE

Thu, 01 Oct 2026 10:00:00 +0000

Multiple WAGO devices are affected by CODESYS Control vulnerabilities. The affected WAGO firmware versions are <4.10.0 (FW32) and <4.10.0 (70).

VDE-2025-007 — WAGO: Year 2038 problem

Tue, 15 Apr 2025 10:00:00 +0000

The Year 2038 Problem affects systems using a 32-bit integer to represent time as the number of seconds since January 1, 1970. On January 19, 2038, at 03:14:07 UTC, the time value will exceed the maximum for a 32-bit integer, causing an overflow and resetting it to a negative number.

VDE-2026-031 — WAGO: Early-Boot Diagnostic Exposure in WAGO System I/O Field Devices

Mon, 13 Jul 2026 07:00:00 +0000

Certain devices in the WAGO System I/O Field series enable an internal diagnostic capability during the initial stages of system startup. This behavior, which is not part of the publicly documented feature set, briefly allows access to system functions before the main operating environment becomes fully active. Under specific conditions, this could permit interactions with system components that are normally protected during regular operation.

VDE-2024-008 — Wago: Vulnerability in WBM through Open VPN

Wed, 08 Apr 2026 07:00:00 +0000

An authenticated remote attacker with high privileges can exploit the OpenVPN configuration via the web-based management interface of a WAGO PLC. If user-defined scripts are permitted, OpenVPN may allow the execution of arbitrary shell commands enabling the attacker to run arbitrary commands on the device.

VDE-2026-021 — WAGO: Multiple Vulnerabilities in WAGO VC Hub

Mon, 30 Mar 2026 07:00:00 +0000

The VC Hub incorporates the Magick.NET‑Q16‑AnyCPU component, derived from ImageMagick, to process user‑uploaded images and generate thumbnails within the projects image library. Only authenticated users with the Design Project Permission can upload images.

VDE-2026-010 — WAGO: Multiple Vulnerabilities in WAGO Solution Builder and WAGO Device Sphere

Mon, 30 Mar 2026 07:00:00 +0000

Multiple vulnerabilities have been identified in WAGO Solution Builder and WAGO Device Sphere that affect components responsible for authentication and system communication.

VDE-2026-020 — WAGO: Vulnerability in managed switches

Mon, 23 Mar 2026 08:00:00 +0000

A vulnerability has been found affecting the Managed Switches of WAGO. An unauthenticated attacker can fully compromise the device via an undocumented function.

VDE-2026-004 — WAGO: Vulnerabilities in Managed Switch

Mon, 09 Feb 2026 08:00:00 +0000

Several vulnerabilities have been identified in the WAGO 852‑1328 device's web‑based management interface, which is implemented using a modified lighttpd server and custom CGI binaries. These issues include multiple stack buffer overflows, an authentication bypass, and insecure credential storage.

VDE-2025-095 — WAGO: Vulnerabilities in WAGO Industrial-Managed Switches

Wed, 10 Dec 2025 10:00:00 +0000

Two remote stack buffer overflow vulnerabilities were discovered in WAGO industrial switches. These issues originate from unsafe input handling in custom HTTP request parsing functions within the lighttpd binary. The affected binary lacks modern security features such as PIE and RELRO, increasing the risk of successful exploitation.