CVE-2012-4879

The Linux Console on the WAGO I/O System 758 model 758-870, 758-874, 758-875, and 758-876 Industrial PC (IPC) devices has a default password of wago for the…

published September 7, 2012

CVSS
—
EPSS
3%
Percentile
87.8
In the wild
Unconfirmed
What it is

⚠️ Default passwords galore! WAGO I/O System 758 devices ship with easily guessable credentials like 'wago' for root and admin, making remote TELNET access a cakewalk for attackers. 🍰 Think of it as leaving the front door wide open with a sign that says, 'Welcome in!' instead of locking it up tight. It’s a clear invitation for intruders to stroll right into your network. With these default passwords, an attacker could gain unauthorized access to critical functions, potentially compromising the entire system. They could alter configurations, disrupt operations, or even take control of connected machinery. Yikes!

Put simply

Think of it as leaving the front door wide open with a sign that says, 'Welcome in!' instead of locking it up tight. It’s a clear invitation for intruders to stroll right into your network. This vulnerability stems from the presence of default credentials on the WAGO I/O System 758 models, allowing attackers to exploit unsecured TELNET sessions to log in as root or admin without any further authentication.

What to do

With these default passwords, an attacker could gain unauthorized access to critical functions, potentially compromising the entire system. They could alter configurations, disrupt operations, or even take control of connected machinery. Yikes! Immediately change the default passwords for all accounts to strong, unique passwords. Review your network for any devices still using default credentials, and implement stricter access controls to limit TELNET exposure. 🔒 You've got this! By taking these steps, you'll be locking down access and keeping your systems safe! 🛡️

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.03153 · 87.8th percentile
Published
2012-09-07T00:00Z
EPSS history
Timeline
  • 07 SEP 00:00Z
    The Linux Console on the WAGO I/O System 758 model 758-870, 758-874, 758-875, and 758-876 Industrial PC (IPC) devices has a default password of wago for the…
    cvelistv5