WAGO 762-4306/8000-002

CPE Details

WAGO 762-4306/8000-002
wago
762-4306\/8000-002
-
2022-03-17
19h33 +00:00
2022-04-07
15h13 +00:00
CPE NVD
Alerte pour un CPE
Restez informé de toutes modifications pour un CPE spécifique.
Gestion des notifications

CPE Name: cpe:2.3:h:wago:762-4306\/8000-002:-:*:*:*:*:*:*:*

Informations

Vendor

wago

Product

762-4306\/8000-002

Version

-

Related CVE

Open and find in CVE List

CVE ID Publié Description Score Gravité
CVE-2020-12069 2022-12-25 23h00 +00:00 In CODESYS V3 products in all versions prior V3.5.16.0 containing the CmpUserMgr, the CODESYS Control runtime system stores the online communication passwords using a weak hashing algorithm. This can be used by a local attacker with low privileges to gain full control of the device.
7.8
Haute
CVE-2021-34569 2022-11-09 15h17 +00:00 In WAGO I/O-Check Service in multiple products an attacker can send a specially crafted packet containing OS commands to crash the diagnostic tool and write memory.
9.8
Critique
CVE-2021-34568 2022-11-09 15h17 +00:00 In WAGO I/O-Check Service in multiple products an unauthenticated remote attacker can send a specially crafted packet containing OS commands to provoke a denial of service.
7.5
Haute
CVE-2021-34567 2022-11-09 15h17 +00:00 In WAGO I/O-Check Service in multiple products an unauthenticated remote attacker can send a specially crafted packet containing OS commands to provoke a denial of service and an limited out-of-bounds read.
8.2
Haute
CVE-2021-34566 2022-11-09 15h17 +00:00 In WAGO I/O-Check Service in multiple products an unauthenticated remote attacker can send a specially crafted packet containing OS commands to crash the iocheck process and write memory resulting in loss of integrity and DoS.
9.1
Critique
CVE-2022-22511 2022-03-09 19h38 +00:00 Various configuration pages of the device are vulnerable to reflected XSS (Cross-Site Scripting) attacks. An authorized attacker with user privileges may use this to gain access to confidential information on a PC that connects to the WBM after it has been compromised.
5.4
Moyen