CVE-2015-6472

Опубликовано: 22 авг. 2017

Источник: nvd

CVSS3: 9.8

CVSS2: 5

EPSS Низкий

Описание

WAGO IO 750-849 01.01.27 and 01.02.05, WAGO IO 750-881, and WAGO IO 758-870 have weak credential management.

Ссылки

http://packetstormsecurity.com/files/136077/WAGO-IO-PLC-758-870-750-849-Credential-Management-Privilege-Separation.html
Exploit
Third Party Advisory
VDB Entry
http://seclists.org/fulldisclosure/2016/Mar/4
Exploit
Mailing List
Third Party Advisory
VDB Entry
http://www.securityfocus.com/bid/84138
Third Party Advisory
VDB Entry
http://packetstormsecurity.com/files/136077/WAGO-IO-PLC-758-870-750-849-Credential-Management-Privilege-Separation.html
Exploit
Third Party Advisory
VDB Entry
http://seclists.org/fulldisclosure/2016/Mar/4
Exploit
Mailing List
Third Party Advisory
VDB Entry
http://www.securityfocus.com/bid/84138
Third Party Advisory
VDB Entry

Уязвимые конфигурации

Конфигурация 1

Одновременно

Одно из

cpe:2.3:o:wago:750-849_firmware:01.01.27:*:*:*:*:*:*:*

cpe:2.3:o:wago:750-849_firmware:01.02.05:*:*:*:*:*:*:*

cpe:2.3:h:wago:750-849:-:*:*:*:*:*:*:*

Конфигурация 2

Одновременно

Одно из

cpe:2.3:o:wago:750-881_firmware:01.01.27:*:*:*:*:*:*:*

cpe:2.3:o:wago:750-881_firmware:01.02.05:*:*:*:*:*:*:*

cpe:2.3:h:wago:750-881:-:*:*:*:*:*:*:*

Конфигурация 3

Одновременно

Одно из

cpe:2.3:o:wago:758-870_firmware:01.01.27:*:*:*:*:*:*:*

cpe:2.3:o:wago:758-870_firmware:01.02.05:*:*:*:*:*:*:*

cpe:2.3:h:wago:758-870:-:*:*:*:*:*:*:*

EPSS

Процентиль: 79%

0.0127

Низкий

9.8 Critical

CVSS3

5 Medium

CVSS2

Дефекты

CWE-255

Связанные уязвимости

GHSA-8qvv-xwvj-235m

CVSS3: 9.8

github

больше 3 лет назад

WAGO IO 750-849 01.01.27 and 01.02.05, WAGO IO 750-881, and WAGO IO 758-870 have weak credential management.

EPSS

Процентиль: 79%

0.0127

Низкий

9.8 Critical

CVSS3

5 Medium

CVSS2

Дефекты

CWE-255