PT-2017-7026 · Wago · Wago Io 750-849+1

Karn Ganeshen · Published 2017-08-22 · Updated 2021-07-09 · CVE-2015-6473

Positive Technologies (AI Summary)

CVSS v2.0

10

High

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions WAGO IO 750-849 version 01.01.27 WAGO IO 750-881 version 01.02.05

Description The issue is related to the lack of privilege separation.

Recommendations For WAGO IO 750-849 version 01.01.27, consider implementing additional access controls to minimize the risk of exploitation. For WAGO IO 750-881 version 01.02.05, restrict access to sensitive areas of the system to reduce the potential impact of the issue. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Weakness Enumeration

CWE-254

Related Identifiers

CVE-2015-6473

Affected Products

Wago Io 750-849

Wago 750-881

References · 4

• 🔥 http://packetstormsecurity.com/files/136077/WAGO-IO-PLC-758-870-750-849-Credential-Management-Privilege-Separation.html · Exploit
• 🔥 http://seclists.org/fulldisclosure/2016/Mar/4 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2015-6473 · Security Note
• http://securityfocus.com/bid/84138 · Note