CVE-2021-21001: Wago 750-8202 Firmware

Medium severity, CVSS 6.5. EPSS: 1.1% chance of exploitation in the next 30 days.

On WAGO PFC200 devices in different firmware versions with special crafted packets an authorised attacker with network access to the device can access the file system with higher privileges.

Affected products

  • Wago 750-8202 Firmware: before 03.06.19_\(18\) (fixed in 03.06.19_\(18\))
  • Wago 750-8203 Firmware: before 03.06.19_\(18\) (fixed in 03.06.19_\(18\))
  • Wago 750-8204 Firmware: before 03.06.19_\(18\) (fixed in 03.06.19_\(18\))
  • Wago 750-8206 Firmware: before 03.06.19_\(18\) (fixed in 03.06.19_\(18\))
  • Wago 750-8207 Firmware: before 03.06.19_\(18\) (fixed in 03.06.19_\(18\))
  • Wago 750-8208 Firmware: before 03.06.19_\(18\) (fixed in 03.06.19_\(18\))
  • Wago 750-8210 Firmware: before 03.06.19_\(18\) (fixed in 03.06.19_\(18\))
  • Wago 750-8211 Firmware: before 03.06.19_\(18\) (fixed in 03.06.19_\(18\))
  • Wago 750-8212 Firmware: before 03.06.19_\(18\) (fixed in 03.06.19_\(18\))
  • Wago 750-8213 Firmware: before 03.06.19_\(18\) (fixed in 03.06.19_\(18\))
  • Wago 750-8214 Firmware: before 03.06.19_\(18\) (fixed in 03.06.19_\(18\))
  • Wago 750-8216 Firmware: before 03.06.19_\(18\) (fixed in 03.06.19_\(18\))
  • Wago 750-8217 Firmware: before 03.06.19_\(18\) (fixed in 03.06.19_\(18\))
  • Wago 750-823 Firmware: before fw08 (fixed in fw08)
  • Wago 750-829 Firmware: before fw15 (fixed in fw15)
  • Wago 750-831 Firmware: before fw15 (fixed in fw15)
  • Wago 750-832 Firmware: before fw08 (fixed in fw08)
  • Wago 750-852 Firmware: before fw15 (fixed in fw15)
  • Wago 750-862 Firmware: before fw08 (fixed in fw08)
  • Wago 750-880 Firmware: before fw16 (fixed in fw16)
  • Wago 750-881 Firmware: before fw15 (fixed in fw15)
  • Wago 750-882 Firmware: before fw15 (fixed in fw15)
  • Wago 750-885 Firmware: before fw15 (fixed in fw15)
  • Wago 750-889 Firmware: before fw15 (fixed in fw15)
  • Wago 750-890 Firmware: before fw08 (fixed in fw08)
  • and 2 more

Published 2021-05-24. Last modified 2026-06-17.