CVE-2020-12505 HIGH

CVE-2020-12505: WAGO: Vulnerability in web-based authentication in WAGO 750-8XX Version <= FW07

Vendor Wago
Product 750-852
Weakness CWE-306 · Missing auth
Published September 30, 2020
Last update September 16, 2024
View on NVD All CVEs

CVSS base score

8.2/10
Attack vector Network
Attack complexity Low
Privileges required None
User interaction None
Confidentiality None
Integrity Low

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H

What the vulnerability does

01Description

Improper Authentication vulnerability in WAGO 750-8XX series with FW version <= FW07 allows an attacker to change some special parameters without authentication. This issue affects: WAGO 750-852, WAGO 750-880/xxx-xxx, WAGO 750-881, WAGO 750-831/xxx-xxx, WAGO 750-882, WAGO 750-885/xxx-xxx, WAGO 750-889 in versions FW07 and below.

Key dates

02Disclosure timeline

September 30, 2020 CVE published
September 16, 2024 Record updated

Related vulnerabilities

04Related CVE

CVE-2026-42074 OpenClaude: Sandbox Bypass via Model-Controlled `dangerouslyDisableSandbox` Input CVE-2026-50507 Windows BitLocker Security Feature Bypass Vulnerability CVE-2019-25738 WordPress Hybrid Composer 1.4.6 Unauthenticated Settings Change CVE-2026-44211 Cline Kanban Server has a Cross-Origin WebSocket Hijacking Vulnerability CVE-2024-27890 On affected platforms running Arista EOS with OpenConfig configured, a gNMI Set request can be run when it should have been rejected (No SSL Profiles Enabled).