CVE-2020-12506: Wago 750-362 Firmware

Critical severity, CVSS 9.1. EPSS: 1.5% chance of exploitation in the next 30 days.

Improper Authentication vulnerability in WAGO 750-8XX series with FW version <= FW03 allows an attacker to change the settings of the devices by sending specifically constructed requests without authentication This issue affects: WAGO 750-362, WAGO 750-363, WAGO 750-823, WAGO 750-832/xxx-xxx, WAGO 750-862, WAGO 750-891, WAGO 750-890/xxx-xxx in versions FW03 and prior versions.

Affected products

  • Wago 750-362 Firmware: up to and including fw03
  • Wago 750-363 Firmware: up to and including fw03
  • Wago 750-823 Firmware: up to and including fw03
  • Wago 750-832 Firmware: up to and including fw03
  • Wago 750-862 Firmware: up to and including fw03
  • Wago 750-890 Firmware: up to and including fw03
  • Wago 750-891 Firmware: up to and including fw03

Published 2020-09-30. Last modified 2026-06-17.