Skip to content

Known vulnerabilities in WAGO TP600 0762-530x/8000-000x

Is your version affected?

CVE Summary Score Published
CVE-2025-25265 A web application for configuring the controller is accessible at a specific path 4.9 Medium Jun 16, 2025
CVE-2025-25264 An unauthenticated remote attacker can trick an admin to visit a website containing malicious java script code 6.5 Medium Jun 16, 2025
CVE-2025-0101 A low privileged user can set the date of the devices to the 19th of January 2038 an therefore exceed the 32-Bit time… 6.5 Medium Apr 16, 2025
CVE-2024-12650 An attacker with low privileges can manipulate the requested memory size, causing the application to use an invalid… 5.4 Medium Mar 5, 2025
CVE-2024-41974 A low privileged remote attacker may modify the BACNet service properties due to incorrect permission assignment for… 7.1 High Nov 18, 2024
CVE-2024-41973 A low privileged remote attacker can specify an arbitrary file on the filesystem which may lead to an arbitrary file… 8.1 High Nov 18, 2024
CVE-2024-41972 A low privileged remote attacker can overwrite an arbitrary file on the filesystem which may lead to an arbitrary file… 6.5 Medium Nov 18, 2024
CVE-2024-41971 A low privileged remote attacker can overwrite an arbitrary file on the filesystem leading to a DoS and data loss 8.1 High Nov 18, 2024
CVE-2024-41970 A low privileged remote attacker may gain access to forbidden diagnostic data due to incorrect permission assignment for… 5.7 Medium Nov 18, 2024
CVE-2024-41969 A low privileged remote attacker may modify the configuration of the CODESYS V3 service through a missing authentication… 8.8 High Nov 18, 2024
CVE-2024-41967 A low privileged remote attacker may modify the boot mode configuration setup of the device, leading to modification… 8.1 High Nov 18, 2024
CVE-2024-41968 A low privileged remote attacker may modify the docker settings setup of the device, leading to a limited DoS 5.4 Medium Nov 18, 2024

Other WAGO products