CVE-2019-10712

The Web-GUI on WAGO Series 750-88x (750-330, 750-352, 750-829, 750-831, 750-852, 750-880, 750-881, 750-882, 750-884, 750-885, 750-889) and Series 750-87x…

published May 7, 2019

CVSS
—
EPSS
3%
Percentile
86.2
In the wild
Unconfirmed
What it is

⚠️ There's a hidden door in the WAGO Series 750 Web-GUI that lets someone in without knocking! 🚪 It's like a restaurant with a back entrance that staff can use to bypass the front where customers are checked in. If the staff forget to lock that door, anyone could waltz right into the kitchen! An attacker could potentially gain unauthorized access to sensitive control settings, compromising the integrity of the system. This could lead to unexpected behavior in automation processes, risking both equipment and safety. Yikes!

Put simply

It's like a restaurant with a back entrance that staff can use to bypass the front where customers are checked in. If the staff forget to lock that door, anyone could waltz right into the kitchen! This vulnerability involves undocumented service access on multiple WAGO Series 750 devices, allowing potential unauthorized interaction with the device without proper authentication.

What to do

An attacker could potentially gain unauthorized access to sensitive control settings, compromising the integrity of the system. This could lead to unexpected behavior in automation processes, risking both equipment and safety. Yikes! To safeguard against this, ensure your devices are running the latest firmware updates and disable any unnecessary services that might expose this access. Regularly audit user access and system configurations to mitigate potential risks. You've got this! Secure your setup, and keep the digital kitchen safe! 🛡️

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.02763 · 86.2th percentile
Published
2019-05-07T21:20Z
EPSS history
Timeline
  • 07 MAY 21:20Z
    The Web-GUI on WAGO Series 750-88x (750-330, 750-352, 750-829, 750-831, 750-852, 750-880, 750-881, 750-882, 750-884, 750-885, 750-889) and Series 750-87x…
    cvelistv5