← CVE Intelligence

CVE-2021-34578

WAGO: Authentication Vulnerability in Web-Based Management PUBLISHED

Description (CNA)

This vulnerability allows an attacker who has access to the WBM to read and write settings-parameters of the device by sending specifically constructed requests without authentication on multiple WAGO PLCs in firmware versions up to FW07.

Affected (CNA)

Vendor / productVersions
WAGO / PLCaffected 750-362 through FW07; affected 750-363 through FW07; affected 750-823 through FW07; affected 750-832/xxx-xxx through FW07; affected 750-862 through FW07; affected 750-891 through FW07; affected 750-890/xxx-xxx through FW07; affected 750-893 through FW07

CWE

CWE-287

References

ADP enrichment

CVE

No English description supplied.