PT-2017-10086 · Wago · Wago 750-8202/Pfc200+2

Maxim Rupp · Publicado 2017-02-13 · Atualizado 2017-06-28 · CVE-2016-9362

Positive Technologies (AI Summary)

CVSS v2.0

6.4

Média

Vetor base

AV:N/AC:L/Au:N/C:P/I:P/A:N

Name of the Vulnerable Software and Affected Versions WAGO 750-8202/PFC200 versions prior to FW04 WAGO 750-881 versions prior to FW09 WAGO 0758-0874-0000-0111 (affected versions not specified)

Description An issue allows a malicious user to edit and view settings without authenticating by accessing a specific uniform resource locator (URL) on the web server.

Recommendations For WAGO 750-8202/PFC200 versions prior to FW04, update to FW04 or later. For WAGO 750-881 versions prior to FW09, update to FW09 or later. For WAGO 0758-0874-0000-0111, at the moment, there is no information about a newer version that contains a fix for this issue.

Correção

Improper Authentication

Enumeração de Fraquezas

CWE-287

Identificadores relacionados

CVE-2016-9362

Produtos afetados

Wago 0758-0874-0000-0111

Wago 750-8202/Pfc200

Wago 750-881

Referências · 3

• http://securityfocus.com/bid/95074 · Nota
• https://ics-cert.us-cert.gov/advisories/ICSA-16-357-02 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2016-9362 · Nota de Segurança