WAGO 750-88X and WAGO 750-89X Ethernet Controller devices, versions 01.09.18(13) and before, have XSS in the SNMP configuration via the webserv/cplcfg/snmp.ssi SNMP_DESC or SNMP_LOC_SNMP_CONT field.
| Software | From | Fixed in |
|---|---|---|
| wago / wago_750-881_ethernet_controller_devices_firmware | 01.08.01(10) | 01.08.01(10).x |
| wago / wago_750-881_ethernet_controller_devices_firmware | 01.09.18(13) | 01.09.18(13).x |
| wago / 750-362_firmware | - | 05 |
| wago / 750-363_firmware | - | 05 |
| wago / 750-823_firmware | - | 05 |
| wago / 750-832_firmware | - | 05 |
| wago / 750-862_firmware | - | 05 |
| wago / 750-891_firmware | - | 05 |
| wago / 750-890_firmware | - | 05 |
| wago / 750-352_firmware | - | 14 |
| wago / 750-831_firmware | - | 14 |
| wago / 750-852_firmware | - | 14 |
| wago / 750-880_firmware | - | 14 |
| wago / 750-881_firmware | - | 14 |
| wago / 750-889_firmware | - | 14 |