Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-8wf3-m6g4-jx6p

Опубликовано: 24 мая 2022
Источник: github
Github: Не прошло ревью

Описание

Improper Authentication vulnerability in WAGO 750-8XX series with FW version <= FW07 allows an attacker to change some special parameters without authentication. This issue affects: WAGO 750-852 version FW07 and prior versions. WAGO 750-880/xxx-xxx version FW07 and prior versions. WAGO 750-881 version FW07 and prior versions. WAGO 750-831/xxx-xxx version FW07 and prior versions. WAGO 750-882 version FW07 and prior versions. WAGO 750-885/xxx-xxx version FW07 and prior versions. WAGO 750-889 version FW07 and prior versions.

Improper Authentication vulnerability in WAGO 750-8XX series with FW version <= FW07 allows an attacker to change some special parameters without authentication. This issue affects: WAGO 750-852 version FW07 and prior versions. WAGO 750-880/xxx-xxx version FW07 and prior versions. WAGO 750-881 version FW07 and prior versions. WAGO 750-831/xxx-xxx version FW07 and prior versions. WAGO 750-882 version FW07 and prior versions. WAGO 750-885/xxx-xxx version FW07 and prior versions. WAGO 750-889 version FW07 and prior versions.

EPSS

Процентиль: 50%
0.00269
Низкий

Дефекты

CWE-306

Связанные уязвимости

CVSS3: 8.2
nvd
больше 5 лет назад

Improper Authentication vulnerability in WAGO 750-8XX series with FW version <= FW07 allows an attacker to change some special parameters without authentication. This issue affects: WAGO 750-852, WAGO 750-880/xxx-xxx, WAGO 750-881, WAGO 750-831/xxx-xxx, WAGO 750-882, WAGO 750-885/xxx-xxx, WAGO 750-889 in versions FW07 and below.

CVSS3: 9.1
fstec
больше 5 лет назад

Уязвимость ethernet контроллера WAGO, связанная с недостатками процедуры аутентификации, позволяющая нарушителю изменить некоторые специальные параметры без аутентификации

EPSS

Процентиль: 50%
0.00269
Низкий

Дефекты

CWE-306