Skip to content

Known vulnerabilities in WAGO PFC200 G1 750-820x-xxx-xxx

Is your version affected?

CVE Summary Score Published
CVE-2025-25265 A web application for configuring the controller is accessible at a specific path 4.9 Medium Jun 16, 2025
CVE-2025-25264 An unauthenticated remote attacker can trick an admin to visit a website containing malicious java script code 6.5 Medium Jun 16, 2025
CVE-2025-0101 A low privileged user can set the date of the devices to the 19th of January 2038 an therefore exceed the 32-Bit time… 6.5 Medium Apr 16, 2025
CVE-2024-12650 An attacker with low privileges can manipulate the requested memory size, causing the application to use an invalid… 5.4 Medium Mar 5, 2025
CVE-2024-41969 A low privileged remote attacker may modify the configuration of the CODESYS V3 service through a missing authentication… 8.8 High Nov 18, 2024
CVE-2024-41967 A low privileged remote attacker may modify the boot mode configuration setup of the device, leading to modification… 8.1 High Nov 18, 2024
CVE-2024-41968 A low privileged remote attacker may modify the docker settings setup of the device, leading to a limited DoS 5.4 Medium Nov 18, 2024

Other WAGO products