WAGO 0852-1322 vulnerabilities

🔔 Create alert RSS Version checker

Published CVEs affecting WAGO 0852-1322: 4 record(s), with affected versions and fixes.

CVE-2026-22906 Critical · 9.8 CWE-321 Feb 9, 2026

Hard-coded key AES-ECB credential storage exposing usernames and passwords (CWE-321)

User credentials are stored using AES‑ECB encryption with a hardcoded key. An unauthenticated remote attacker obtaining the configuration file can decrypt and recover plaintext usernames and passwords, especially when combined with the authentication bypass.

CVE-2026-22905 High · 7.5 CWE-22 Feb 9, 2026

Authentication Bypass via URI Traversal

An unauthenticated remote attacker can bypass authentication by exploiting insufficient URI validation and using path traversal sequences (e.g., /js/../cgi-bin/post.cgi), gaining unauthorized access to protected CGI endpoints and configuration downloads.

CVE-2026-22904 Critical · 9.8 CWE-121 Feb 9, 2026

Stack buffer overflow in multi-cookie parsing (CWE-121)

Improper length handling when parsing multiple cookie fields (including TRACKID) allows an unauthenticated remote attacker to send oversized cookie values and trigger a stack buffer overflow, resulting in a denial‑of‑service condition and possible remote code execution.

CVE-2026-22903 Critical · 9.8 CWE-121 Feb 9, 2026

lighttpd (modified) stack buffer overflow via SESSIONID cookie

An unauthenticated remote attacker can send a crafted HTTP request containing an overly long SESSIONID cookie. This can trigger a stack buffer overflow in the modified lighttpd server, causing it to crash and potentially enabling remote code execution due to missing stack protections.