PT-2017-10086 · Wago · Wago 750-8202/Pfc200+2

Maxim Rupp · Published 2017-02-13 · Updated 2017-06-28 · CVE-2016-9362

Positive Technologies (AI Summary)

CVSS v2.0

6.4

Medium

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:N

Name of the Vulnerable Software and Affected Versions WAGO 750-8202/PFC200 versions prior to FW04 WAGO 750-881 versions prior to FW09 WAGO 0758-0874-0000-0111 (affected versions not specified)

Description An issue allows a malicious user to edit and view settings without authenticating by accessing a specific uniform resource locator (URL) on the web server.

Recommendations For WAGO 750-8202/PFC200 versions prior to FW04, update to FW04 or later. For WAGO 750-881 versions prior to FW09, update to FW09 or later. For WAGO 0758-0874-0000-0111, at the moment, there is no information about a newer version that contains a fix for this issue.

Fix

Improper Authentication

Weakness Enumeration

CWE-287

Related Identifiers

CVE-2016-9362

Affected Products

Wago 0758-0874-0000-0111

Wago 750-8202/Pfc200

Wago 750-881

References · 3

• https://nvd.nist.gov/vuln/detail/CVE-2016-9362 · Security Note
• http://securityfocus.com/bid/95074 · Note
• https://ics-cert.us-cert.gov/advisories/ICSA-16-357-02 · Note