PT-2017-7025 · Wago · Wago Io 758-870+2

Karn Ganeshen · Publicado 2017-08-22 · Atualizado 2021-07-09 · CVE-2015-6472

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Média

Vetor base

AV:N/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions WAGO IO 750-849 versions 01.01.27 through 01.02.05 WAGO IO 750-881 WAGO IO 758-870

Description The issue is related to weak credential management.

Recommendations For WAGO IO 750-849 versions 01.01.27 through 01.02.05, update the credential management system to enforce strong passwords and consider implementing additional authentication measures. For WAGO IO 750-881, improve credential storage and transmission to prevent unauthorized access. For WAGO IO 758-870, enhance the authentication process to mitigate the risk of weak credentials being exploited.

Exploit

Correção

Enumeração de Fraquezas

CWE-255

Identificadores relacionados

CVE-2015-6472

Produtos afetados

Wago Io 750-849

Wago 750-881

Wago Io 758-870

Referências · 4

• 🔥 http://packetstormsecurity.com/files/136077/WAGO-IO-PLC-758-870-750-849-Credential-Management-Privilege-Separation.html · Exploit
• 🔥 http://seclists.org/fulldisclosure/2016/Mar/4 · Exploit
• http://securityfocus.com/bid/84138 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2015-6472 · Nota de Segurança