Início
Tendências
Vulnerabilidades
Notícias
Pesquisadores
Por que dbugs?

Wht

#25595de 53,612
9.8CVSS total
Vulnerabilidades · 1
PT-2019-3767
9.8
2019-04-12
Wago · Wago Series 750-88X · CVE-2019-10712
**Name of the Vulnerable Software and Affected Versions** WAGO Series 750-88x versions 750-330, 750-352, 750-829, 750-831, 750-852, 750-880, 750-881, 750-882, 750-884, 750-885, 750-889 WAGO Series 750-87x versions 750-830, 750-849, 750-871, 750-872, 750-873 **Description** The issue exists due to hardcoded registration data in the Web-GUI component of the programmable logic controllers' firmware. This allows a remote attacker to modify settings. The Web-GUI on affected devices has undocumented service access. **Recommendations** For WAGO Series 750-88x devices, consider disabling the Web-GUI service until a patch is available. For WAGO Series 750-87x devices, restrict access to the Web-GUI component to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.