What’s Vulnerable › Vulnerabilities

CVE-2020-12505: WAGO: Vulnerability in web-based authentication in WAGO 750-8XX Version <= FW07

• Severity: medium (CVSS 6.4 v2.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 1.2% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2020-09-30 · updated 2026-06-17
• Weakness: CWE-306

Description

Improper Authentication vulnerability in WAGO 750-8XX series with FW version <= FW07 allows an attacker to change some special parameters without authentication. This issue affects: WAGO 750-852, WAGO 750-880/xxx-xxx, WAGO 750-881, WAGO 750-831/xxx-xxx, WAGO 750-882, WAGO 750-885/xxx-xxx, WAGO 750-889 in versions FW07 and below.

Affected products

• WAGO 750-831 Firmware: through fw07
• WAGO 750-852 Firmware: through fw07
• WAGO 750-880 Firmware: through fw07
• WAGO 750-881 Firmware: through fw07
• WAGO 750-882 Firmware: through fw07
• WAGO 750-885 Firmware: through fw07
• WAGO 750-889 Firmware: through fw07

References

• https://cert.vde.com/en-us/advisories/vde-2020-027
• https://cert.vde.com/en-us/advisories/vde-2020-027

Get alerted when CVE-2020-12505 or the next vulnerability affects your stack