PT-2019-3573 · Wago · Wago 852-1505+2

Published 2019-06-13 · Updated 2019-06-19 · CVE-2019-12550

Positive Technologies (AI Summary)

CVSS v2.0

10

Critical

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions WAGO 852-303 versions before FW06 WAGO 852-1305 versions before FW06 WAGO 852-1505 versions before FW03

Description The issue is related to hardcoded users and passwords in the devices, which can be used for login via SSH and TELNET protocols. This allows a remote attacker to access the device using these protocols. The vulnerability is associated with the presence of pre-installed authentication data, specifically a root account.

Recommendations For WAGO 852-303 versions before FW06, update to FW06 or later to resolve the issue. For WAGO 852-1305 versions before FW06, update to FW06 or later to resolve the issue. For WAGO 852-1505 versions before FW03, update to FW03 or later to resolve the issue. As a temporary workaround, consider disabling SSH and TELNET access to the devices until a patch is available.

Fix

Using Hardcoded Credentials

Weakness Enumeration

CWE-798

Related Identifiers

BDU:2019-03776

CVE-2019-12550

Affected Products

Wago 852-1305

Wago 852-1505

Wago 852-303

References · 8

• https://bdu.fstec.ru/vul/2019-03776 · Security Note
• https://wago.com/us · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2019-12550 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2019-12550 · Security Note
• https://ics-cert.us-cert.gov/advisories/ICSA-19-164-02 · Note
• https://cert.vde.com/en-us/advisories/vde-2019-013 · Note
• https://exploit.kitploit.com/2019/06/wago-852-industrial-managed-switch.html · Note
• https://us-cert.gov/ics/advisories/ICSA-19-164-02 · Note