Wago 762-4305/8000-002 Firmware — known CVE vulnerabilities

Every CVE whose affected-product data names Wago 762-4305/8000-002 Firmware, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (6)

• CVE-2021-34569 — CVSS 9.8 (critical): In WAGO I/O-Check Service in multiple products an attacker can send a specially crafted packet containing OS commands to crash the…
• CVE-2021-34566 — CVSS 9.1 (critical): In WAGO I/O-Check Service in multiple products an unauthenticated remote attacker can send a specially crafted packet containing OS…
• CVE-2021-34567 — CVSS 8.2 (high): In WAGO I/O-Check Service in multiple products an unauthenticated remote attacker can send a specially crafted packet containing OS…
• CVE-2020-12069 — CVSS 7.8 (high): In CODESYS V3 products in all versions prior V3.5.16.0 containing the CmpUserMgr, the CODESYS Control runtime system stores the online…
• CVE-2021-34568 — CVSS 7.5 (high): In WAGO I/O-Check Service in multiple products an unauthenticated remote attacker can send a specially crafted packet containing OS…
• CVE-2022-22511 — CVSS 5.4 (medium): Various configuration pages of the device are vulnerable to reflected XSS (Cross-Site Scripting) attacks. An authorized attacker with user…