CVE-2018-16210: Wago 750-352 Firmware

Medium severity, CVSS 6.1. EPSS: 1% chance of exploitation in the next 30 days.

WAGO 750-88X and WAGO 750-89X Ethernet Controller devices, versions 01.09.18(13) and before, have XSS in the SNMP configuration via the webserv/cplcfg/snmp.ssi SNMP_DESC or SNMP_LOC_SNMP_CONT field.

Affected products

• Wago 750-352 Firmware: before 14 (fixed in 14)
• Wago 750-362 Firmware: before 05 (fixed in 05)
• Wago 750-363 Firmware: before 05 (fixed in 05)
• Wago 750-823 Firmware: before 05 (fixed in 05)
• Wago 750-831 Firmware: before 14 (fixed in 14)
• Wago 750-832 Firmware: before 05 (fixed in 05)
• Wago 750-852 Firmware: before 14 (fixed in 14)
• Wago 750-862 Firmware: before 05 (fixed in 05)
• Wago 750-880 Firmware: before 14 (fixed in 14)
• Wago 750-881 Firmware: before 14 (fixed in 14)
• Wago 750-889 Firmware: before 14 (fixed in 14)
• Wago 750-890 Firmware: before 05 (fixed in 05)
• Wago 750-891 Firmware: before 05 (fixed in 05)
• Wago Wago 750-881 Ethernet Controller Devices Firmware: version 01.08.01(10) only; version 01.09.18(13) only

Published 2018-10-12. Last modified 2026-06-17.