CVE-2019-10712
First published: Tue May 07 2019(Updated: )
The Web-GUI on WAGO Series 750-88x (750-330, 750-352, 750-829, 750-831, 750-852, 750-880, 750-881, 750-882, 750-884, 750-885, 750-889) and Series 750-87x (750-830, 750-849, 750-871, 750-872, 750-873) devices has undocumented service access.
Credit: cve@mitre.org
| Affected Software | Affected Version | How to fix |
|---|---|---|
| WAGO 750-830 firmware | <06 | |
| WAGO 750-830 firmware | ||
| WAGO 750-849 firmware | <08 | |
| WAGO 750-849 firmware | ||
| WAGO Ethernet Firmware | <11 | |
| WAGO 750-871 firmware | ||
| WAGO Ethernet Firmware | <07 | |
| WAGO 750-872 firmware | ||
| WAGO 750-873 firmware | <07 | |
| WAGO 750-873 firmware | ||
| WAGO 750-330 | <14 | |
| WAGO 750-330 firmware | ||
| WAGO 750-352 firmware | <14 | |
| WAGO 750-352 firmware | ||
| WAGO 750-829 firmware | <14 | |
| WAGO 750-829 firmware | ||
| WAGO Ethernet Firmware | <14 | |
| WAGO 750-831 firmware | ||
| WAGO 750-852 firmware | <14 | |
| WAGO 750-xxx series firmware | ||
| WAGO 750-880/040-000 firmware | <14 | |
| WAGO 750-880/040-000 | ||
| WAGO Ethernet Firmware | <14 | |
| WAGO 750-881 firmware | ||
| WAGO 750-882 firmware | <14 | |
| WAGO 750-882 firmware | ||
| WAGO 750-884 firmware | <14 | |
| WAGO 750-884 firmware | ||
| WAGO 750-885 firmware | <14 | |
| WAGO 750-885 firmware | ||
| WAGO 750-889 firmware | <14 | |
| WAGO 750-889 firmware |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- http://www.securityfocus.com/bid/108482
- https://cert.vde.com/de-de/advisories/vde-2019-008
- https://lists.apache.org/thread.html/r0066c1e862613de402fee04e81cbe00bcd64b64a2711beb9a13c3b25@%3Ccommits.cassandra.apache.org%3E
- https://lists.apache.org/thread.html/r25e25973e9577c62fd0221b4b52990851adf11cbe33036bd67d4b13d@%3Ccommits.cassandra.apache.org%3E
- https://lists.apache.org/thread.html/r37eb6579fa0bf94a72b6c978e2fee96f68a2b1b3ac1b1ce60aee86cf@%3Ccommits.cassandra.apache.org%3E
- https://lists.apache.org/thread.html/r386966780034aadee69ffd82d44555117c9339545b9ce990fe490a3e@%3Ccommits.cassandra.apache.org%3E
- https://lists.apache.org/thread.html/r80e8882c86c9c17a57396a5ef7c4f08878d629a0291243411be0de3a@%3Ccommits.cassandra.apache.org%3E
- https://lists.apache.org/thread.html/ra37700b842790883b9082e6b281fb7596f571b13078a4856cd38f2c2@%3Ccommits.cassandra.apache.org%3E
- https://lists.apache.org/thread.html/rb47911c179c9f3e8ea3f134b5645e63cd20c6fc63bd0b43ab5864bd1@%3Ccommits.cassandra.apache.org%3E
- https://lists.apache.org/thread.html/r25e25973e9577c62fd0221b4b52990851adf11cbe33036bd67d4b13d%40%3Ccommits.cassandra.apache.org%3E
- https://lists.apache.org/thread.html/ra37700b842790883b9082e6b281fb7596f571b13078a4856cd38f2c2%40%3Ccommits.cassandra.apache.org%3E
- https://lists.apache.org/thread.html/r0066c1e862613de402fee04e81cbe00bcd64b64a2711beb9a13c3b25%40%3Ccommits.cassandra.apache.org%3E
- https://lists.apache.org/thread.html/r37eb6579fa0bf94a72b6c978e2fee96f68a2b1b3ac1b1ce60aee86cf%40%3Ccommits.cassandra.apache.org%3E
- https://lists.apache.org/thread.html/rb47911c179c9f3e8ea3f134b5645e63cd20c6fc63bd0b43ab5864bd1%40%3Ccommits.cassandra.apache.org%3E
- https://lists.apache.org/thread.html/r386966780034aadee69ffd82d44555117c9339545b9ce990fe490a3e%40%3Ccommits.cassandra.apache.org%3E
- https://lists.apache.org/thread.html/r80e8882c86c9c17a57396a5ef7c4f08878d629a0291243411be0de3a%40%3Ccommits.cassandra.apache.org%3E
Frequently Asked Questions
What is CVE-2019-10712?
CVE-2019-10712 is a vulnerability found in the Web-GUI on WAGO Series 750-88x and Series 750-87x devices, which allows undocumented service access.
How severe is CVE-2019-10712?
CVE-2019-10712 has a severity score of 9.8, making it a critical vulnerability.
Which WAGO devices are affected by CVE-2019-10712?
CVE-2019-10712 affects WAGO Series 750-88x (750-330, 750-352, 750-829, 750-831, 750-852, 750-880, 750-881, 750-882, 750-884, 750-885, 750-889) and Series 750-87x (750-830, 750-849, 750-871, 750-872, 750-873) devices.
How do I fix CVE-2019-10712?
To fix CVE-2019-10712, it is recommended to apply the latest firmware updates provided by WAGO.
Where can I find more information about CVE-2019-10712?
More information about CVE-2019-10712 can be found at the following references: [1] http://www.securityfocus.com/bid/108482, [2] https://cert.vde.com/de-de/advisories/vde-2019-008, [3] https://lists.apache.org/thread.html/r0066c1e862613de402fee04e81cbe00bcd64b64a2711beb9a13c3b25@%3Ccommits.cassandra.apache.org%3E
- agent/type
- agent/severity
- agent/weakness
- agent/author
- agent/description
- collector/mitre-cve
- source/MITRE
- agent/references
- agent/last-modified-date
- agent/first-publish-date
- agent/event
- agent/source
- agent/softwarecombine
- agent/tags
- collector/nvd-index
- agent/software-canonical-lookup-request
- vendor/wago
- canonical/wago 750-830 firmware
- canonical/wago 750-849 firmware
- canonical/wago ethernet firmware
- canonical/wago 750-871 firmware
- canonical/wago 750-872 firmware
- canonical/wago 750-873 firmware
- canonical/wago 750-330
- canonical/wago 750-330 firmware
- canonical/wago 750-352 firmware
- canonical/wago 750-829 firmware
- canonical/wago 750-831 firmware
- canonical/wago 750-852 firmware
- canonical/wago 750-xxx series firmware
- canonical/wago 750-880/040-000 firmware
- canonical/wago 750-880/040-000
- canonical/wago 750-881 firmware
- canonical/wago 750-882 firmware
- canonical/wago 750-884 firmware
- canonical/wago 750-885 firmware
- canonical/wago 750-889 firmware