CVE-2016-9362

Опубликовано: 13 фев. 2017

Источник: nvd

CVSS3: 9.1

CVSS2: 6.4

EPSS Низкий

Описание

An issue was discovered in WAGO 750-8202/PFC200 prior to FW04 (released August 2015), WAGO 750-881 prior to FW09 (released August 2016), and WAGO 0758-0874-0000-0111. By accessing a specific uniform resource locator (URL) on the web server, a malicious user is able to edit and to view settings without authenticating.

Ссылки

http://www.securityfocus.com/bid/95074
Third Party Advisory
VDB Entry
https://ics-cert.us-cert.gov/advisories/ICSA-16-357-02
Third Party Advisory
US Government Resource
http://www.securityfocus.com/bid/95074
Third Party Advisory
VDB Entry
https://ics-cert.us-cert.gov/advisories/ICSA-16-357-02
Third Party Advisory
US Government Resource

Уязвимые конфигурации

Конфигурация 1

Одновременно

cpe:2.3:o:wago:pfc200_firmware:-:*:*:*:*:*:*:*

cpe:2.3:h:wago:pfc200:-:*:*:*:*:*:*:*

Конфигурация 2

Одновременно

cpe:2.3:o:wago:750-xxxx_series_firmware:-:*:*:*:*:*:*:*

Одно из

cpe:2.3:h:wago:750-8202:-:*:*:*:*:*:*:*

cpe:2.3:h:wago:750-881:-:*:*:*:*:*:*:*

Конфигурация 3

Одновременно

cpe:2.3:o:wago:758-xxxx_series_firmware:-:*:*:*:*:*:*:*

cpe:2.3:h:wago:758-874-0000-0111:-:*:*:*:*:*:*:*

EPSS

Процентиль: 43%

0.00206

Низкий

9.1 Critical

CVSS3

6.4 Medium

CVSS2

Дефекты

CWE-287

Связанные уязвимости

GHSA-9grp-vp5p-rx5w

CVSS3: 9.1

github

больше 3 лет назад

EPSS

Процентиль: 43%

0.00206

Низкий

9.1 Critical

CVSS3

6.4 Medium

CVSS2

Дефекты

CWE-287