← Database

CVE-2021-34578

CRITICAL CVSS: 9.8 Published: 2021-08-31 Modified: 2026-06-17

Description

This vulnerability allows an attacker who has access to the WBM to read and write settings-parameters of the device by sending specifically constructed requests without authentication on multiple WAGO PLCs in firmware versions up to FW07.

Affected Platforms

Wago 750-893Wago 750-832\/000-002Wago 750-890\/025-002 FirmwareWago 750-890\/025-002Wago 750-362 FirmwareWago 750-832\/000-002 FirmwareWago 750-862Wago 750-890\/025-001Wago 750-823 FirmwareWago 750-832 Firmware

Weakness Type

CWE-287

References