exploitDog

CVE-2015-6473

Опубликовано: 22 авг. 2017

Источник: nvd

CVSS3: 9.8

CVSS2: 10

EPSS Низкий

Описание

WAGO IO 750-849 01.01.27 and WAGO IO 750-881 01.02.05 do not contain privilege separation.

Ссылки

http://packetstormsecurity.com/files/136077/WAGO-IO-PLC-758-870-750-849-Credential-Management-Privilege-Separation.html
Exploit
Third Party Advisory
VDB Entry
http://seclists.org/fulldisclosure/2016/Mar/4
Exploit
Mailing List
Third Party Advisory
VDB Entry
http://www.securityfocus.com/bid/84138
Third Party Advisory
VDB Entry
http://packetstormsecurity.com/files/136077/WAGO-IO-PLC-758-870-750-849-Credential-Management-Privilege-Separation.html
Exploit
Third Party Advisory
VDB Entry
http://seclists.org/fulldisclosure/2016/Mar/4
Exploit
Mailing List
Third Party Advisory
VDB Entry
http://www.securityfocus.com/bid/84138
Third Party Advisory
VDB Entry

Уязвимые конфигурации

Конфигурация 1

Одновременно

cpe:2.3:o:wago:750-849_firmware:01.01.27:*:*:*:*:*:*:*

cpe:2.3:h:wago:750-849:-:*:*:*:*:*:*:*

Конфигурация 2

Одновременно

Одно из

cpe:2.3:o:wago:758-870_firmware:01.01.27:*:*:*:*:*:*:*

cpe:2.3:o:wago:758-870_firmware:01.02.05:*:*:*:*:*:*:*

cpe:2.3:h:wago:758-870:-:*:*:*:*:*:*:*

EPSS

Процентиль: 86%

0.02913

Низкий

9.8 Critical

CVSS3

10 Critical

CVSS2

Дефекты

CWE-254

Связанные уязвимости

GHSA-m6c7-9xcw-465q

CVSS3: 9.8

github

больше 3 лет назад

WAGO IO 750-849 01.01.27 and WAGO IO 750-881 01.02.05 do not contain privilege separation.

EPSS

Процентиль: 86%

0.02913

Низкий

9.8 Critical

CVSS3

10 Critical

CVSS2

Дефекты

CWE-254