CVE-2016-9362
CRITICALWAGO - Auth Bypass
Title source: llmDescription
An issue was discovered in WAGO 750-8202/PFC200 prior to FW04 (released August 2015), WAGO 750-881 prior to FW09 (released August 2016), and WAGO 0758-0874-0000-0111. By accessing a specific uniform resource locator (URL) on the web server, a malicious user is able to edit and to view settings without authenticating.
Scores
CVSS v3
9.1
EPSS
0.0021
EPSS Percentile
42.5%
Attack Vector
NETWORK
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
Classification
CWE
CWE-287
Status
draft
Affected Products (3)
wago/pfc200_firmware
wago/750-xxxx_series_firmware
wago/758-xxxx_series_firmware
Timeline
Published
Feb 13, 2017
Tracked Since
Feb 18, 2026