PT-2017-7025 · Wago · Wago Io 758-870+2

Karn Ganeshen · Published 2017-08-22 · Updated 2021-07-09 · CVE-2015-6472

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions WAGO IO 750-849 versions 01.01.27 through 01.02.05 WAGO IO 750-881 WAGO IO 758-870

Description The issue is related to weak credential management.

Recommendations For WAGO IO 750-849 versions 01.01.27 through 01.02.05, update the credential management system to enforce strong passwords and consider implementing additional authentication measures. For WAGO IO 750-881, improve credential storage and transmission to prevent unauthorized access. For WAGO IO 758-870, enhance the authentication process to mitigate the risk of weak credentials being exploited.

Exploit

Fix

Weakness Enumeration

CWE-255

Related Identifiers

CVE-2015-6472

Affected Products

Wago Io 750-849

Wago 750-881

Wago Io 758-870

References · 4

• 🔥 http://packetstormsecurity.com/files/136077/WAGO-IO-PLC-758-870-750-849-Credential-Management-Privilege-Separation.html · Exploit
• 🔥 http://seclists.org/fulldisclosure/2016/Mar/4 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2015-6472 · Security Note
• http://securityfocus.com/bid/84138 · Note