Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-8c2w-ph9m-jcmf

Опубликовано: 24 мая 2022
Источник: github
Github: Не прошло ревью

Описание

Improper Authentication vulnerability in WAGO 750-8XX series with FW version <= FW03 allows an attacker to change the settings of the devices by sending specifically constructed requests without authentication This issue affects: WAGO 750-362 version FW03 and prior versions. WAGO 750-363 version FW03 and prior versions. WAGO 750-823 version FW03 and prior versions. WAGO 750-832/xxx-xxx version FW03 and prior versions. WAGO 750-862 version FW03 and prior versions. WAGO 750-891 version FW03 and prior versions. WAGO 750-890/xxx-xxx version FW03 and prior versions.

Improper Authentication vulnerability in WAGO 750-8XX series with FW version <= FW03 allows an attacker to change the settings of the devices by sending specifically constructed requests without authentication This issue affects: WAGO 750-362 version FW03 and prior versions. WAGO 750-363 version FW03 and prior versions. WAGO 750-823 version FW03 and prior versions. WAGO 750-832/xxx-xxx version FW03 and prior versions. WAGO 750-862 version FW03 and prior versions. WAGO 750-891 version FW03 and prior versions. WAGO 750-890/xxx-xxx version FW03 and prior versions.

EPSS

Процентиль: 50%
0.00269
Низкий

Дефекты

CWE-306

Связанные уязвимости

CVSS3: 9.1
nvd
больше 5 лет назад

Improper Authentication vulnerability in WAGO 750-8XX series with FW version <= FW03 allows an attacker to change the settings of the devices by sending specifically constructed requests without authentication This issue affects: WAGO 750-362, WAGO 750-363, WAGO 750-823, WAGO 750-832/xxx-xxx, WAGO 750-862, WAGO 750-891, WAGO 750-890/xxx-xxx in versions FW03 and prior versions.

CVSS3: 9.1
fstec
больше 5 лет назад

Уязвимость ethernet контроллера WAGO, связанная с недостатками процедуры аутентификации, позволяющая нарушителю изменить настройки устройства

EPSS

Процентиль: 50%
0.00269
Низкий

Дефекты

CWE-306