Home/Product/wago touch panel 600 standard firmware
Product

wago touch panel 600 standard firmware

9 known vulnerabilities across versions
Vulnerabilities are listed by affected version. Select any CVE for the full briefing and its intelligence graph.
CVE-2023-3379
<= 25
Wago web-based management of multiple products has a vulnerability which allows an local authenticated attacker to change the pas
5.3MEDIUM
CVE-2023-4089
>= 16 and <= 26
On affected Wago products an remote attacker with administrative privileges can access files to which he has already access to thr
2.7LOW
CVE-2023-1698
all versions
In multiple products of WAGO a vulnerability allows an unauthenticated, remote attacker to create new users and change the device
9.8CRITICAL
CVE-2022-45140
>= 16 and < 22
The configuration backend allows an unauthenticated user to write arbitrary data with root privileges to the storage, which could
9.8CRITICAL
CVE-2022-45139
>= 16 and < 22
A CORS Misconfiguration in the web-based management allows a malicious third party webserver to misuse all basic information pages
5.3MEDIUM
CVE-2022-45138
>= 16 and < 22
The configuration backend of the web-based management can be used by unauthenticated users, although only authenticated users shou
9.8CRITICAL
CVE-2022-45137
>= 16 and < 22
The configuration backend of the web-based management is vulnerable to reflected XSS (Cross-Site Scripting) attacks that targets t
6.1MEDIUM
CVE-2022-3738
>= 16 and <= 22
The vulnerability allows a remote unauthenticated attacker to download a backup file, if one exists. That backup file might contai
5.9MEDIUM
CVE-2020-12522
<= 10
The reported vulnerability allows an attacker who has network access to the device to execute code with specially crafted packets
10.0CRITICAL
Vulnerabilities
CISA KEV catalog
CWE weaknesses
CAPEC attack patterns
Package vulnerabilities
Threat intelligence
Threat actors
Tools & malware
ATT&CK techniques
IOCs
Detection & defense
Sigma rules
YARA rules
Atomic Red Team tests
D3FEND countermeasures
Compliance
NIST 800-53
ISO 27001:2022
SOC 2 TSC
PCI-DSS v4.0
CIS Controls v8.1
About
All capabilities
Live statistics
Data sources
Privacy policy
Terms of service
threatengine.sh  ·  Open-source threat intelligence platform  ·  100+ authoritative sources  ·  Every fact traces to its origin