Wago 0852-1505 Firmware vulnerabilities

6 CVEs affecting Wago 0852-1505 Firmware, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2021-20998, published 2021-05-13.

More from Wago.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2021-20998, published 2021-05-13. Critical severity, CVSS 9.8. EPSS: 1.1% chance of exploitation in the next 30 days. In multiple managed switches by WAGO in different versions without authorization and with specially crafted packets it is possible to create users.
• CVE-2021-20997, published 2021-05-13. High severity, CVSS 7.5. EPSS: 1% chance of exploitation in the next 30 days. In multiple managed switches by WAGO in different versions it is possible to read out the password hashes of all Web-based Management users.
• CVE-2021-20993, published 2021-05-13. Medium severity, CVSS 5.3. EPSS: 0.8% chance of exploitation in the next 30 days. In multiple managed switches by WAGO in different versions the activated directory listing provides an attacker with the index of the resources located inside the directory.
• CVE-2021-20996, published 2021-05-13. Medium severity, CVSS 5.3. EPSS: 0.8% chance of exploitation in the next 30 days. In multiple managed switches by WAGO in different versions special crafted requests can lead to cookies being transferred to third parties.
• CVE-2021-20994, published 2021-05-13. Medium severity, CVSS 6.1. EPSS: 0.6% chance of exploitation in the next 30 days. In multiple managed switches by WAGO in different versions an attacker may trick a legitimate user to click a link to inject possible malicious code into the Web-Based Management.
• CVE-2021-20995, published 2021-05-13. High severity, CVSS 7.5. EPSS: 0.5% chance of exploitation in the next 30 days. In multiple managed switches by WAGO in different versions the webserver cookies of the web based UI contain user credentials.