First published: Tue Aug 22 2017(Updated: )
WAGO IO 750-849 01.01.27 and 01.02.05, WAGO IO 750-881, and WAGO IO 758-870 have weak credential management.
Credit: ics-cert@hq.dhs.gov
Affected Software | Affected Version | How to fix |
---|---|---|
WAGO 750-849 firmware | =01.01.27 | |
WAGO 750-849 firmware | =01.02.05 | |
WAGO 750-849 firmware | ||
WAGO Ethernet Firmware | =01.01.27 | |
WAGO Ethernet Firmware | =01.02.05 | |
WAGO 750-881 firmware | ||
WAGO 758-xxxx series firmware | =01.01.27 | |
WAGO 758-xxxx series firmware | =01.02.05 | |
WAGO 758-870 firmware |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2015-6472 is classified as a medium severity vulnerability due to weak credential management.
To fix CVE-2015-6472, update the firmware of your affected WAGO IO devices to the latest version that addresses the credential management issue.
CVE-2015-6472 affects the WAGO IO 750-849 (versions 01.01.27 and 01.02.05), 750-881 (versions 01.01.27 and 01.02.05), and 758-870 (versions 01.01.27 and 01.02.05).
The implications of CVE-2015-6472 include potential unauthorized access to the devices due to weak credential management practices.
Yes, CVE-2015-6472 poses a risk of data exposure as weak credentials can be exploited by an attacker to gain access to sensitive information.