PT-2012-4437 · Wago · Wago I/O System 758

Published 2012-09-07 · Updated 2013-10-08 · CVE-2012-3013

Positive Technologies (AI Summary)

CVSS v2.0

10

High

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions WAGO I/O System 758 model versions 758-870, 758-874, 758-875, and 758-876

Description The issue allows remote attackers to obtain administrative access via a TCP session due to default passwords for Web Based Management accounts.

Recommendations For versions 758-870, 758-874, 758-875, and 758-876, change the default passwords for Web Based Management accounts to prevent unauthorized access. As a temporary workaround, consider restricting access to the Web Based Management interface until the default passwords are changed.

Fix

Weakness Enumeration

CWE-255

Related Identifiers

CVE-2012-3013

Affected Products

Wago I/O System 758

References · 3

• https://nvd.nist.gov/vuln/detail/CVE-2012-3013 · Security Note
• http://wago.com/wagoweb/documentation/app_note/a1176/a117600e.pdf · Vendor Advisory
• http://us-cert.gov/control_systems/pdf/ICSA-12-249-02.pdf · Note