CVEvulnerability

CVE-2020-12506

9.1 CRITICAL Published 2020-09-30 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2020-09-30
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.1 ([email protected])
9.1 CRITICAL — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H
CVSS 3.1 ([email protected])
9.1 CRITICAL — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H
CVSS 2.0 ([email protected])
6.4 MEDIUM — AV:N/AC:L/Au:N/C:N/I:P/A:P
Weaknesses
CWE-306

Description

Improper Authentication vulnerability in WAGO 750-8XX series with FW version <= FW03 allows an attacker to change the settings of the devices by sending specifically constructed requests without authentication This issue affects: WAGO 750-362, WAGO 750-363, WAGO 750-823, WAGO 750-832/xxx-xxx, WAGO 750-862, WAGO 750-891, WAGO 750-890/xxx-xxx in versions FW03 and prior versions.

Affected configurations

• wago 750-362 firmware (<= fw03) • wago 750-363 firmware (<= fw03) • wago 750-823 firmware (<= fw03) • wago 750-832 firmware (<= fw03) • wago 750-862 firmware (<= fw03) • wago 750-891 firmware (<= fw03) • wago 750-890 firmware (<= fw03)

Related

Weakness · CWE (1)

  • CWE-306 Missing Authentication for Critical Functionality weakness

References