CVE-2018-12980

HOCH 8.8CVE-2018-12980 · Published 12/07/2018 · updated 17/06/2026

Package	Affected versions	Patched versions
—	No affected product versions are listed for this vulnerability yet.

Description

An issue was discovered on WAGO e!DISPLAY 762-3000 through 762-3003 devices with firmware before FW 02. The vulnerability allows an authenticated user to upload arbitrary files to the file system with the permissions of the web server.

References

seclists.org/fulldisclosure/2018/Jul/38 · Exploit
cert.vde.com/en-us/advisories/vde-2018-010 · Third Party Advisory
ics-cert.us-cert.gov/advisories/ICSA-18-198-02 · Third Party Advisory
exploit-db.com/exploits/45014 · Exploit
sec-consult.com/en/blog/advisories/remote-code-execution-via-multiple-attack-vectors-in-wago-edisplay · Exploit
wago.com/medias/SA-WBM-2018-004.pdf · Third Party Advisory

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free