CVE-2020-12505

HIGH

WAGO 750-8XX series <= FW07 - Auth Bypass

Title source: llm
STIX 2.1

Description

Improper Authentication vulnerability in WAGO 750-8XX series with FW version <= FW07 allows an attacker to change some special parameters without authentication. This issue affects: WAGO 750-852, WAGO 750-880/xxx-xxx, WAGO 750-881, WAGO 750-831/xxx-xxx, WAGO 750-882, WAGO 750-885/xxx-xxx, WAGO 750-889 in versions FW07 and below.

References (1)

Core 1
Core References
Third Party Advisory x_refsource_confirm
https://cert.vde.com/en-us/advisories/vde-2020-027

Scores

CVSS v3 8.2
EPSS 0.0125
EPSS Percentile 65.6%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H

Details

CWE
CWE-306
Status published
Products (7)
wago/750-831_firmware < fw07
wago/750-852_firmware < fw07
wago/750-880_firmware < fw07
wago/750-881_firmware < fw07
wago/750-882_firmware < fw07
wago/750-885_firmware < fw07
wago/750-889_firmware < fw07
Published Sep 30, 2020
Tracked Since Feb 18, 2026