Vulnerabilities CVE-2021-21001 CVE-2021-21001 WAGO: PFC200 Access to files outside the home directory
Description On WAGO PFC200 devices in different firmware versions with special crafted packets an authorised attacker with network access to the device can access the file system with higher privileges.
Scores CVSS Score Vector Source 3.1 9.1 Critical CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H CERTVDE
Weaknesses CWE-22 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') Affected Products Product Versions Series PFC200 Controller WAGO
750-823 through FW07 Affected 750-829 through FW14 Affected 750-831/000-00x through FW14 Affected 750-832/000-00x through FW06 Affected 750-852 through FW14 Affected 750-862 through FW07 Affected 750-880/0xx-xxx through FW15 Affected 750-881 through FW14 Affected 750-882 through FW14 Affected 750-885/0xx-xxx through FW14 Affected 750-889 through FW14 Affected 750-890/0xx-xxx through FW07 Affected 750-891 through FW07 Affected 750-893 through FW07 Affected Series Ethernet Controller WAGO
750-8202/xxx-xxx to before 03.06.19 (18) Affected 750-8203/xxx-xxx to before 03.06.19 (18) Affected 750-8204/xxx-xxx to before 03.06.19 (18) Affected 750-8206/xxx-xxx to before 03.06.19 (18) Affected 750-8207/xxx-xxx to before 03.06.19 (18) Affected 750-8208/xxx-xxx to before 03.06.19 (18) Affected 750-8210/xxx-xxx to before 03.06.19 (18) Affected 750-8211/xxx-xxx to before 03.06.19 (18) Affected 750-8212/xxx-xxx to before 03.06.19 (18) Affected 750-8213/xxx-xxx to before 03.06.19 (18) Affected 750-8214/xxx-xxx to before 03.06.19 (18) Affected 750-8216/xxx-xxx to before 03.06.19 (18) Affected 750-8217/xxx-xxx to before 03.06.19 (18) Affected
Every record here comes from the CVE Program’s CVE List . © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use .
