Wago 750-352 Firmware vulnerabilities

4 CVEs affecting Wago 750-352 Firmware, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2015-10123, published 2024-03-13.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2019-10712, published 2019-05-07. Critical severity, CVSS 9.8. EPSS: 2.8% chance of exploitation in the next 30 days. The Web-GUI on WAGO Series 750-88x (750-330, 750-352, 750-829, 750-831, 750-852, 750-880, 750-881, 750-882, 750-884, 750-885, 750-889) and Series 750-87x (750-830, 750-849, 750-871, 750-872, 750-873)…
CVE-2020-12516, published 2020-12-10. High severity, CVSS 7.5. EPSS: 1.9% chance of exploitation in the next 30 days. Older firmware versions (FW1 up to FW10) of the WAGO PLC family 750-88x and 750-352 are vulnerable for a special denial of service attack.
CVE-2018-16210, published 2018-10-12. Medium severity, CVSS 6.1. EPSS: 1% chance of exploitation in the next 30 days. WAGO 750-88X and WAGO 750-89X Ethernet Controller devices, versions 01.09.18(13) and before, have XSS in the SNMP configuration via the webserv/cplcfg/snmp.ssi SNMP_DESC or SNMP_LOC_SNMP_CONT field.
CVE-2015-10123, published 2024-03-13. High severity, CVSS 8.8. EPSS: 0.6% chance of exploitation in the next 30 days. An unautheticated remote attacker could send specifically crafted packets to a affected device. If an authenticated user then views that data in a specific page of the web-based management a buffer…