Wago

Wago manufactures industrial automation controllers and programmable logic devices—particularly its PFC200 series and modular I/O terminals—that serve critical infrastructure and manufacturing environments, placing it among the most prominent vendors in the operational-technology landscape. Vulnerabilities affecting the vendor skew strongly toward critical severity, reflecting the memory-safety and authentication challenges inherent to embedded control systems, and the exposure recurs across product lines through weakness classes including out-of-bounds writes, OS command injection, missing authentication for critical functions, and cross-site scripting. The concentration of high-severity flaws across Wago's controller firmware and networked devices creates elevated risk for defenders managing industrial networks, since many instances remain in long-service deployments with constrained patching windows. Defenders should prioritize inventory and network segmentation of affected Wago devices and align remediation with maintenance schedules; current severity and exploitation figures are shown alongside this summary.