CVE-2021-20997: Wago 0852-0303 Firmware

High severity, CVSS 7.5. EPSS: 1% chance of exploitation in the next 30 days.

In multiple managed switches by WAGO in different versions it is possible to read out the password hashes of all Web-based Management users.

Affected products

• Wago 0852-0303 Firmware: up to and including 1.2.3.s0
• Wago 0852-1305/000-001 Firmware: up to and including 1.0.4.s0
• Wago 0852-1305 Firmware: up to and including 1.1.7.s0
• Wago 0852-1505/000-001 Firmware: up to and including 1.0.4.s0
• Wago 0852-1505 Firmware: up to and including 1.1.6.s0

Published 2021-05-13. Last modified 2026-06-17.