CVE-2015-6472

WAGO IO 750-849 01.01.27 and 01.02.05, WAGO IO 750-881, and WAGO IO 758-870 have weak credential management

published August 22, 2017

CVSS
—
EPSS
3%
Percentile
86.7
In the wild
Unconfirmed
What it is

⚠️ Weak credential management is lurking in select WAGO IO devices! If you’re running versions 01.01.27 or 01.02.05 on your WAGO IO 750-849 or 750-881, you might want to pay attention! Think of this as a hotel that leaves its front door unlocked. Anyone can waltz right in without showing ID, putting the safety of all guests at risk. If an attacker decides to take advantage of this vulnerability, they could potentially access and manipulate sensitive configurations without any authentication barriers. This could lead to unauthorized control over industrial processes, which is absolutely devastating!

Put simply

Think of this as a hotel that leaves its front door unlocked. Anyone can waltz right in without showing ID, putting the safety of all guests at risk. The WAGO IO devices in question have weak credential management, meaning they may allow unauthorized access due to insufficient controls on user authentication and credentials.

What to do

If an attacker decides to take advantage of this vulnerability, they could potentially access and manipulate sensitive configurations without any authentication barriers. This could lead to unauthorized control over industrial processes, which is absolutely devastating! To safeguard your systems, immediately review your device configurations and ensure that strong, unique passwords are set. If possible, apply any firmware updates from WAGO to enhance security measures. You've got this! With a few tweaks, you can help ensure your systems are safe and sound. 🛡️

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.02876 · 86.7th percentile
Published
2017-08-22T18:00Z
EPSS history
Timeline
  • 22 AUG 18:00Z
    WAGO IO 750-849 01.01.27 and 01.02.05, WAGO IO 750-881, and WAGO IO 758-870 have weak credential management
    cvelistv5