CVE-2015-6472

WAGO IO 750-849 01.01.27 and 01.02.05, WAGO IO 750-881, and WAGO IO 758-870 have weak credential management.

Score

CVSS 3.0 9.8 Critical

Status

Modified - ics-cert@hq.dhs.gov

Published

2017-08-22

Last modified

2024-08-06

Weaknesses

CWE-255

Affected products

• 750-849 Firmware (Wago)
• 750-881 Firmware (Wago)
• 758-870 Firmware (Wago)

References

• http://packetstormsecurity.com/files/136077/WAGO-IO-PLC-758-870-750-849-Credential-Management-Privilege-Separation.html
• http://seclists.org/fulldisclosure/2016/Mar/4
• http://www.securityfocus.com/bid/84138