CVE-2019-10712 Hardcoded credentials in n/a
Undocumented service access in WAGO PLC Web-GUI allows attackers to bypass authentication and gain unauthorized access to the device.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2019-10712?
CVE-2019-10712 is a critical vulnerability in n/a, published on 7 May 2019. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
The Web-GUI on WAGO Series 750-88x (750-330, 750-352, 750-829, 750-831, 750-852, 750-880, 750-881, 750-882, 750-884, 750-885, 750-889) and Series 750-87x (750-830, 750-849, 750-871, 750-872, 750-873) devices has undocumented service access.
Weakness: CWE-798
Which versions are affected by CVE-2019-10712?
It affects 16 products.
Products include Wago 750-330 Firmware, Wago 750-352 Firmware, Wago 750-829 Firmware, Wago 750-830 Firmware, Wago 750-831 Firmware, Wago 750-849 Firmware and 10 more.
How do I fix CVE-2019-10712?
No fix has been published for CVE-2019-10712 yet. Limit exposure of the affected software until one is available.
Is CVE-2019-10712 being exploited?
There is no known exploitation of CVE-2019-10712 in the wild and no public exploit code.
Sources
Also known as GHSA-r6gg-5rm9-xp64.