CVE-2024-126505.4MediumCWE-252

CVE-2024-12650: Wago: Vulnerability in libwagosnmp

WAGO · CC100 0751-9x01

Vendor fix available · Affected: WAGO CC100 0751-9x01 · Exploitation: unlikely (under 1%)

Not in CyberSIXT coverage yet: no article names this CVE. This page shows the public record.

0.3%probability of exploitation in the next 30 days

22nd percentile

050100

Higher than 22% of scored CVEs

5.4MediumCVSS 3.1

LowMediumHighCrit.

DescriptionCVE.org

An attacker with low privileges can manipulate the requested memory size, causing the application to use an invalid memory area. This could lead to a crash of the application but it does not affected other applications.

Affected products20

From the CVE record. A product or version that is not listed is unknown, not unaffected.

WAGO · CC100 0751-9x01before 04.07.01
WAGO · CC100 0751-9x01before 04.07.01
WAGO · Edge Controller 0752-8303/8000-0002before 04.07.01
WAGO · Edge Controller 0752-8303/8000-0002before 04.07.01
WAGO · PFC100 G1 0750-810x/xxxx-xxxxbefore 3.10.11
WAGO · PFC100 G1 0750-810x/xxxx-xxxxbefore 04.07.01
WAGO · PFC100 G2 0750-811x-xxxx-xxxxbefore 04.07.01
WAGO · PFC100 G2 0750-811x-xxxx-xxxxbefore 04.07.01
WAGO · PFC200 G1 750-820x-xxx-xxxbefore 3.10.11
WAGO · PFC200 G1 750-820x-xxx-xxxbefore 04.07.01
WAGO · PFC200 G2 750-821x-xxx-xxxbefore 04.07.01
WAGO · PFC200 G2 750-821x-xxx-xxxbefore 04.07.01
WAGO · TP600 0762-420x/8000-000xbefore 04.07.01
WAGO · TP600 0762-420x/8000-000xbefore 04.07.01
WAGO · TP600 0762-430x/8000-000xbefore 04.07.01
WAGO · TP600 0762-430x/8000-000xbefore 04.07.01
WAGO · TP600 0762-520x/8000-000xbefore 04.07.01
WAGO · TP600 0762-520x/8000-000xbefore 04.07.01
WAGO · TP600 0762-530x/8000-000xbefore 04.07.01
WAGO · TP600 0762-530x/8000-000xbefore 04.07.01

On the Atlas

Every published CVE is on the CyberSIXT Atlas, grouped by weakness, vendor and month.

Open the Atlas

Exploitation: Unlikely (under 1%). EPSS under 1%, or no score yet.
CISA KEV: Not listed
Public check: No public nuclei template
Weakness: Unchecked Return Value · Input Validation and Logic
Vendor: WAGO
Published: March 2025
Band: Unlikely (under 1%), March 2025

CoverageNo articles yet

No CyberSIXT article names CVE-2024-12650 yet, so there is no coverage timeline, action brief or change log for it. Everything on this page comes from the public CVE record, CISA KEV, EPSS and the nuclei template index. Search the archive or see the CVEs in the news.