TP600 0762-520x/8000-000x vulnerabilities
4 known vulnerabilities in TP600 0762-520x/8000-000x from WAGO. 4 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.
Latest first
- 7.2 High severity
CC100 (0751-9x01): Improper Control of Generation of Code
An authenticated remote attacker with high privileges can exploit the OpenVPN configuration via the web-based management interface of a WAGO PLC. If user-defined scripts are permitted, OpenVPN may allow the execution of arbitrary shell commands enabling the at
- 7.1 High severity
CC100 0751-9x01: Incorrect Permission Assignment for Critical Resource
A low privileged remote attacker may modify the BACNet service properties due to incorrect permission assignment for critical resources which may lead to a DoS limited to BACNet communication.
- 8.8 High severity
CC100 0751-9x01: Missing Authentication for Critical Functionality
A low privileged remote attacker may modify the configuration of the CODESYS V3 service through a missing authentication vulnerability which could lead to full system access and/or DoS.
- 8.1 High severity
CC100 0751-9x01: Missing Authentication for Critical Functionality
A low privileged remote attacker may modify the boot mode configuration setup of the device, leading to modification of the firmware upgrade process or a denial-of-service attack.