The reported vulnerability allows an attacker who has network access to the device to execute code with specially crafted packets in WAGO Series PFC 100 (750-81xx/xxx-xxx), Series PFC 200 (750-82xx/xxx-xxx), Series Wago Touch Panel 600 Standard Line (762-4xxx), Series Wago Touch
The reported vulnerability allows an attacker who has network access to the device to execute code with specially crafted packets in WAGO Series PFC 100 (750-81xx/xxx-xxx), Series PFC 200 (750-82xx/xxx-xxx), Series Wago Touch Panel 600 Standard Line (762-4xxx), Series Wago Touch Panel 600 Advanced Line (762-5xxx), Series Wago Touch Panel 600 Marine Line (762-6xxx) with firmware versions <=FW10.
| Vendor | Product | Versions |
|---|---|---|
| WAGO | Series PFC 100 (750 | 81xx/xxx-xxx) — FW1 |
| WAGO | Series PFC 200 (750 | 82xx/xxx-xxx) — FW1 |
| WAGO | Series Wago Touch Panel 600 Standard Line (762 | 4xxx) — FW1 |
| WAGO | Series Wago Touch Panel 600 Advanced Line (762 | 5xxx) — FW1 |
| WAGO | Series Wago Touch Panel 600 Marine Line (762 | 6xxx) — FW1 |
Not currently listed on the CISA Known Exploited Vulnerabilities (KEV) catalog. EPSS is the best forward-looking signal — see the EPSS row above.
For the full vendor write-up, exploit chains, and reference implementations, see the references list in section 09.
Ask SARA in chat to draft a starting detection for this CVE in your stack of choice.
No directly-cited follow-up CVEs in the KB record for this advisory. The references list in section 09 carries the vendor cross-references.