Germany
WAGO
Supplier of industrial automation components, including the PFC100/PFC200 PLC series and I/O systems for process automation.
111
Vulnerabilities
6
KEV
43
Advisories
Total vulnerabilities
111
Of which critical (CVSS ≥ 9)
28
KEV matches
6
Products
22
Products
Products of WAGO that IACS Radar follows.
750 Fieldbus Controller
onbekend
12 vulnerabilities
750 Fieldbus Coupler
onbekend
5 vulnerabilities
Basic Controller 100
onbekend
5 vulnerabilities
Building Cloud Services
onbekend
1 vulnerability
CC100
onbekend
44 vulnerabilities
Device Sphere
onbekend
5 vulnerabilities
e!COCKPIT
onbekend
1 vulnerability
e!DISPLAY
onbekend
3 vulnerabilities
EC300
onbekend
15 vulnerabilities
Edge Controller
onbekend
40 vulnerabilities
I/O System Field
onbekend
1 vulnerability
Industrial Managed Switch
onbekend
8 vulnerabilities
Lean Managed Switch
onbekend
1 vulnerability
PFC100
onbekend
59 vulnerabilities
PFC200
PLC
67 vulnerabilities
PFC300
onbekend
6 vulnerabilities
Smart Script
onbekend
4 vulnerabilities
Solution Builder
onbekend
4 vulnerabilities
TP600
onbekend
59 vulnerabilities
VC Hub
onbekend
8 vulnerabilities
WAGO-I/O-PRO
onbekend
1 vulnerability
WP400
onbekend
5 vulnerabilities
Vulnerabilities by priority
Sorted by IACS Radar priority score (CVSS, EPSS, KEV and industrial relevance combined).
CVE-2026-109618
CC100 — PHP Memory Corruption Vulnerability
CVE-2021-44228
Smart Script — Apache Log4j2 Remote Code Execution Vulnerability
CVE-2022-0847
PFC100 — Linux Kernel Privilege Escalation Vulnerability
CVE-2026-109619
CC100 — PHP Stale Internal Request-State Vulnerability
CVE-2021-45046
Smart Script — Apache Log4j2 Deserialization of Untrusted Data Vulnerability
CVE-2025-32463
CC100 — Sudo Inclusion of Functionality from Untrusted Control Sphere Vulnerability
CVE-2023-48795
PFC100 — Siemens SIMATIC S7-1500 CPU 1518-4 PN/DP MFP (6ES7518-4AX00-1AB0) — vulnerability CVE-2023-48795
CVE-2023-1698
CC100 — WAGO CC100 — vulnerability CVE-2023-1698
ICS Advisories
Advisories from CISA or directly from the vendor.
VDE-2025-081
WAGO: Multiple PLCs and Communication Components are Affected by multiple Vulnerabilities leading to RCE
6 November 2026
VDE-2026-102
WAGO: Unauthorized Account Access via Credential Recovery Process
4 November 2026
VDE-2026-132
WAGO: Multiple Devices affected by PHP2Shell
4 November 2026
VDE-2025-102
WAGO: Multiple Devices are affected by a Vulnerability in BACnet IP Stack
1 October 2026
VDE-2025-007
WAGO: Year 2038 problem
7 August 2026
VDE-2026-031
WAGO: Early-Boot Diagnostic Exposure in WAGO System I/O Field Devices
13 July 2026