CVE-2019-10712
Critical
Description
The Web-GUI on WAGO Series 750-88x (750-330, 750-352, 750-829, 750-831, 750-852, 750-880, 750-881, 750-882, 750-884, 750-885, 750-889) and Series 750-87x (750-830, 750-849, 750-871, 750-872, 750-873) devices has undocumented service access.
SeverityCritical
CVSS9.8
Exploit probability—
ProductWago 750-830 Firmware
PublishedMay 7, 2019
First seenMay 7, 2019
How to fix
Update
- wago 750-830_firmware06 or later
- wago 750-849_firmware08 or later
- wago 750-871_firmware11 or later
- wago 750-872_firmware07 or later
- wago 750-873_firmware07 or later
- wago 750-330_firmware14 or later
- wago 750-352_firmware14 or later
- wago 750-829_firmware14 or later
- wago 750-831_firmware14 or later
- wago 750-852_firmware14 or later
- wago 750-880_firmware14 or later
- wago 750-881_firmware14 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| wago 750-830_firmware | v < 06 | 06 |
| wago 750-849_firmware | v < 08 | 08 |
| wago 750-871_firmware | v < 11 | 11 |
| wago 750-872_firmware | v < 07 | 07 |
| wago 750-873_firmware | v < 07 | 07 |
| wago 750-330_firmware | v < 14 | 14 |
| wago 750-352_firmware | v < 14 | 14 |
| wago 750-829_firmware | v < 14 | 14 |
| wago 750-831_firmware | v < 14 | 14 |
| wago 750-852_firmware | v < 14 | 14 |
| wago 750-880_firmware | v < 14 | 14 |
| wago 750-881_firmware | v < 14 | 14 |
| wago 750-882_firmware | v < 14 | 14 |
| wago 750-884_firmware | v < 14 | 14 |
| wago 750-885_firmware | v < 14 | 14 |
| wago 750-889_firmware | v < 14 | 14 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.