CVE-2018-16210
WAGO 750-88X and WAGO 750-89X Ethernet Controller devices, versions 01.09.18(13) and before, have XSS in the SNMP configuration via the webserv/cplcfg/snmp.ssi SNMP_DESC or SNMP_LOC_SNMP_CONT field.
- Score
- CVSS 3.1 6.1 Medium
- Status
- Analyzed - cve@mitre.org
- Published
- 2018-10-12
- Last modified
- 2024-08-05
- Weaknesses
- CWE-79
Affected products
- 750-352 Firmware (Wago)
- 750-362 Firmware (Wago)
- 750-363 Firmware (Wago)
- 750-823 Firmware (Wago)
- 750-831 Firmware (Wago)
- 750-832 Firmware (Wago)
- 750-852 Firmware (Wago)
- 750-862 Firmware (Wago)
- 750-880 Firmware (Wago)
- 750-881 Firmware (Wago)
- 750-889 Firmware (Wago)
- 750-890 Firmware (Wago)
- 750-891 Firmware (Wago)
- Wago 750-881 Ethernet Controller Devices Firmware (Wago)
References
- https://www.exploit-db.com/exploits/45581/
