CRITICAL🇵🇱 Wersja polska

CVE-2020-12522

CVSS 10.0v3.1pub. 2020-12-17upd. 2024-11-21

The reported vulnerability allows an attacker who has network access to the device to execute code with specially crafted packets in WAGO Series PFC 100 (750-81xx/xxx-xxx), Series PFC 200 (750-82xx/xxx-xxx), Series Wago Touch Panel 600 Standard Line (762-4xxx), Series Wago Touch Panel 600 Advanced Line (762-5xxx), Series Wago Touch Panel 600 Marine Line (762-6xxx) with firmware versions <=FW10.

CVSS Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H

  • Wago 750 8101\/025 000

    HW
    Wago
    all versions

  • Wago 750 8102\/025 000

    HW
    Wago
    all versions

  • Wago 750 8202\/000 012

    HW
    Wago
    all versions

  • Wago 750 8202\/000 022

    HW
    Wago
    all versions

  • Wago 750 8202\/040 000

    HW
    Wago
    all versions

  • Wago 750 8202\/040 001

    HW
    Wago
    all versions

  • Wago 750 8206\/025 000

    HW
    Wago
    all versions

  • Wago 750 8206\/025 001

    HW
    Wago
    all versions

  • Wago 750 8206\/040 000

    HW
    Wago
    all versions

  • Wago 750 8206\/040 001

    HW
    Wago
    all versions

  • Wago 750 8207\/025 000

    HW
    Wago
    all versions

  • Wago 750 8207\/025 001

    HW
    Wago
    all versions

  • Wago 750 8208\/025 000

    HW
    Wago
    all versions

  • Wago 750 8208\/025 001

    HW
    Wago
    all versions

  • Wago 750 8210\/025 000

    HW
    Wago
    all versions

  • Wago 750 8210\/040 000

    HW
    Wago
    all versions

  • Wago 750 8211\/040 000

    HW
    Wago
    all versions

  • Wago 750 8211\/040 001

    HW
    Wago
    all versions

  • Wago 750 8212\/025 000

    HW
    Wago
    all versions

  • Wago 750 8212\/025 001

    HW
    Wago
    all versions

  • Wago 750 8212\/025 002

    HW
    Wago
    all versions

  • Wago 750 8212\/040 000

    HW
    Wago
    all versions

  • Wago 750 8212\/040 010

    HW
    Wago
    all versions

  • Wago 750 8213\/040 010

    HW
    Wago
    all versions

  • Wago 750 8216\/025 000

    HW
    Wago
    all versions

  • Wago 750 8216\/025 001

    HW
    Wago
    all versions

  • Wago 750 8217\/025 000

    HW
    Wago
    all versions

  • Wago 762 4301\/8000 002

    HW
    Wago
    all versions

  • Wago 762 4302\/8000 002

    HW
    Wago
    all versions

  • Wago 762 4303\/8000 002

    HW
    Wago
    all versions
🔵
CHECK WITH VENDOR
No clear patch data available. Check vendor references.
Tags
Command Injection
CWE
References

Related vulnerabilities

CVE-2023-1698CRITICAL9.8PL ✓same product

WAGO: Zdalne przejęcie kontroli przez nieuprawnionego atakującego (command injection)

CVE-2022-45140CRITICAL9.8PL ✓same product

WAGO 751/752: Nieuwierzytelniony zapis danych z uprawnieniami root – RCE

CVE-2022-45138CRITICAL9.8PL ✓same product

WAGO 751-9301/752-8303: Pominięcie uwierzytelnienia w API zarządzania

CVE-2021-34569CRITICAL9.8PL ✓same product

WAGO I/O-Check Service — zapis pamięci i wykonanie poleceń OS przez sieć

CVE-2021-34566CRITICAL9.1PL ✓same product

Buffer overflow w WAGO I/O-Check Service umożliwia DoS i naruszenie integralności