CVE Feed

    Dashboard / CVE / CVE-2019-10712

    CVE-2019-10712

    The Web-GUI on WAGO Series 750-88x (750-330, 750-352, 750-829, 750-831, 750-852, 750-880, 750-881, 750-882, 750-884, 750-885, 750-889) and Series 750-87x (750-830, 750-849, 750-871, 750-872, 750-873) devices has undocumented service access.

    Published:May 7, 2019
    Last Modified:Nov 21, 2024
    EPS:May 7, 2019
    EPSS Score:0.00983
    CVSS Score:9.8

    Affected Products

    Vendor
    Wago
    Product
    750-330
    Vendor
    Wago
    Product
    750-330 Firmware
    Vendor
    Wago
    Product
    750-352
    Vendor
    Wago
    Product
    750-352 Firmware
    Vendor
    Wago
    Product
    750-829
    Vendor
    Wago
    Product
    750-829 Firmware
    Vendor
    Wago
    Product
    750-830
    Vendor
    Wago
    Product
    750-830 Firmware
    Vendor
    Wago
    Product
    750-831
    Vendor
    Wago
    Product
    750-831 Firmware
    Vendor
    Wago
    Product
    750-849
    Vendor
    Wago
    Product
    750-849 Firmware
    Vendor
    Wago
    Product
    750-852
    Vendor
    Wago
    Product
    750-852 Firmware
    Vendor
    Wago
    Product
    750-871
    Vendor
    Wago
    Product
    750-871 Firmware
    Vendor
    Wago
    Product
    750-872
    Vendor
    Wago
    Product
    750-872 Firmware
    Vendor
    Wago
    Product
    750-873
    Vendor
    Wago
    Product
    750-873 Firmware
    Vendor
    Wago
    Product
    750-880
    Vendor
    Wago
    Product
    750-880 Firmware
    Vendor
    Wago
    Product
    750-881
    Vendor
    Wago
    Product
    750-881 Firmware
    Vendor
    Wago
    Product
    750-882
    Vendor
    Wago
    Product
    750-882 Firmware
    Vendor
    Wago
    Product
    750-884
    Vendor
    Wago
    Product
    750-884 Firmware
    Vendor
    Wago
    Product
    750-885
    Vendor
    Wago
    Product
    750-885 Firmware
    Vendor
    Wago
    Product
    750-889
    Vendor
    Wago
    Product
    750-889 Firmware

    Exploits

    No exploit reference

    Common Weakness Enumeration

    CWE-798 Use of Hard-coded Credentials

    References

    http://www.securityfocus.com/bid/108482
    https://cert.vde.com/de-de/advisories/vde-2019-008
    https://lists.apache.org/thread.html/r0066c1e862613de402fee04e81cbe00bcd64b64a2711beb9a13c3b25%40%3Ccommits.cassandra.apache.org%3E
    https://lists.apache.org/thread.html/r25e25973e9577c62fd0221b4b52990851adf11cbe33036bd67d4b13d%40%3Ccommits.cassandra.apache.org%3E
    https://lists.apache.org/thread.html/r37eb6579fa0bf94a72b6c978e2fee96f68a2b1b3ac1b1ce60aee86cf%40%3Ccommits.cassandra.apache.org%3E
    https://lists.apache.org/thread.html/r386966780034aadee69ffd82d44555117c9339545b9ce990fe490a3e%40%3Ccommits.cassandra.apache.org%3E
    https://lists.apache.org/thread.html/r80e8882c86c9c17a57396a5ef7c4f08878d629a0291243411be0de3a%40%3Ccommits.cassandra.apache.org%3E
    https://lists.apache.org/thread.html/ra37700b842790883b9082e6b281fb7596f571b13078a4856cd38f2c2%40%3Ccommits.cassandra.apache.org%3E
    https://lists.apache.org/thread.html/rb47911c179c9f3e8ea3f134b5645e63cd20c6fc63bd0b43ab5864bd1%40%3Ccommits.cassandra.apache.org%3E
    http://www.securityfocus.com/bid/108482
    https://cert.vde.com/de-de/advisories/vde-2019-008
    https://lists.apache.org/thread.html/r0066c1e862613de402fee04e81cbe00bcd64b64a2711beb9a13c3b25%40%3Ccommits.cassandra.apache.org%3E
    https://lists.apache.org/thread.html/r25e25973e9577c62fd0221b4b52990851adf11cbe33036bd67d4b13d%40%3Ccommits.cassandra.apache.org%3E
    https://lists.apache.org/thread.html/r37eb6579fa0bf94a72b6c978e2fee96f68a2b1b3ac1b1ce60aee86cf%40%3Ccommits.cassandra.apache.org%3E
    https://lists.apache.org/thread.html/r386966780034aadee69ffd82d44555117c9339545b9ce990fe490a3e%40%3Ccommits.cassandra.apache.org%3E
    https://lists.apache.org/thread.html/r80e8882c86c9c17a57396a5ef7c4f08878d629a0291243411be0de3a%40%3Ccommits.cassandra.apache.org%3E
    https://lists.apache.org/thread.html/ra37700b842790883b9082e6b281fb7596f571b13078a4856cd38f2c2%40%3Ccommits.cassandra.apache.org%3E
    https://lists.apache.org/thread.html/rb47911c179c9f3e8ea3f134b5645e63cd20c6fc63bd0b43ab5864bd1%40%3Ccommits.cassandra.apache.org%3E

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High