PT-2012-4437 · Wago · Wago I/O System 758

Publicado 2012-09-07 · Atualizado 2013-10-08 · CVE-2012-3013

Positive Technologies (AI Summary)

CVSS v2.0

10

Alta

Vetor base

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions WAGO I/O System 758 model versions 758-870, 758-874, 758-875, and 758-876

Description The issue allows remote attackers to obtain administrative access via a TCP session due to default passwords for Web Based Management accounts.

Recommendations For versions 758-870, 758-874, 758-875, and 758-876, change the default passwords for Web Based Management accounts to prevent unauthorized access. As a temporary workaround, consider restricting access to the Web Based Management interface until the default passwords are changed.

Correção

Enumeração de Fraquezas

CWE-255

Identificadores relacionados

CVE-2012-3013

Produtos afetados

Wago I/O System 758

Referências · 3

• https://nvd.nist.gov/vuln/detail/CVE-2012-3013 · Nota de Segurança
• http://us-cert.gov/control_systems/pdf/ICSA-12-249-02.pdf · Nota
• http://wago.com/wagoweb/documentation/app_note/a1176/a117600e.pdf · Aviso do Fabricante