CVE-2020-12505CWE-306

WAGO: Vulnerability in web-based authentication in WAGO 750-8XX Version <= FW07

High · published September 30, 2020

CVSS v3.1
8.2
EPSS
1%
Percentile
69.2
In the wild
Unconfirmed
What it is

Improper Authentication vulnerability in WAGO 750-8XX series with FW version <= FW07 allows an attacker to change some special parameters without authentication. This issue affects: WAGO 750-852, WAGO 750-880/xxx-xxx, WAGO 750-881, WAGO 750-831/xxx-xxx, WAGO 750-882, WAGO 750-885/xxx-xxx, WAGO 750-889 in versions FW07 and below.

The record
Technical detail
CVSS v3.1
8.2 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H
CVSS v4.0
Not supplied
EPSS
0.01247 · 69.2th percentile
Weakness
CWE-306 · Missing Authentication for Critical Function
Published
2020-09-30T15:43Z
EPSS history
Timeline
  • 30 SEP 15:43Z
    WAGO: Vulnerability in web-based authentication in WAGO 750-8XX Version <= FW07
    cvelistv5