Vulnerabilities > CVE-2015-6472 - Credentials Management vulnerability in Wago products

047910
CVSS 5.0 - MEDIUM
Attack vector
NETWORK
Attack complexity
LOW
Privileges required
NONE
Confidentiality impact
PARTIAL
Integrity impact
NONE
Availability impact
NONE
network
low complexity
wago
CWE-255
NVD
Published: 2017-08-22
Updated: 2021-07-09

Summary

WAGO IO 750-849 01.01.27 and 01.02.05, WAGO IO 750-881, and WAGO IO 758-870 have weak credential management.

Vulnerable Configurations

Part Description Count
OS
Wago
6
Hardware
Wago
3

Common Weakness Enumeration (CWE)

Packetstorm

data sourcehttps://packetstormsecurity.com/files/download/136077/wago-credsprivdisclose.txt
idPACKETSTORM:136077
last seen2016-12-05
published2016-03-04
reporterKarn Ganeshen
sourcehttps://packetstormsecurity.com/files/136077/WAGO-IO-PLC-758-870-750-849-Credential-Management-Privilege-Separation.html
titleWAGO IO PLC 758-870 / 750-849 Credential Management / Privilege Separation

References