What’s Vulnerable › Vulnerabilities

CVE-2021-34578: WAGO: Authentication Vulnerability in Web-Based Management

• Severity: high (CVSS 8.1 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 1.0% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2021-08-31 · updated 2026-06-17
• Weakness: CWE-287

Description

This vulnerability allows an attacker who has access to the WBM to read and write settings-parameters of the device by sending specifically constructed requests without authentication on multiple WAGO PLCs in firmware versions up to FW07.

Affected products

• WAGO 750-362 Firmware: through fw07
• WAGO 750-363 Firmware: through fw07
• WAGO 750-823 Firmware: through fw07
• WAGO 750-832/000-002 Firmware: through fw07
• WAGO 750-832 Firmware: through fw07
• WAGO 750-862 Firmware: through fw07
• WAGO 750-890/025-000 Firmware: through fw07
• WAGO 750-890/025-001 Firmware: through fw07
• WAGO 750-890/025-002 Firmware: through fw07
• WAGO 750-890/040-000 Firmware: through fw07
• WAGO 750-891 Firmware: through fw07
• WAGO 750-893 Firmware: through fw07

References

• https://cert.vde.com/en-us/advisories/vde-2020-044
• https://cert.vde.com/en-us/advisories/vde-2020-044

Get alerted when CVE-2021-34578 or the next vulnerability affects your stack