CVE-2019-12549: Critical severity wago 852-303 vulnerability
WAGO 852-303 before FW06, 852-1305 before FW06, and 852-1505 before FW03 devices contain hardcoded private keys for the SSH daemon. The fingerprint of the SSH host key from the corresponding SSH daemon matches the embedded private key.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2019-12549?
CVE-2019-12549 has a severity rating indicating significant risk due to hardcoded private keys in affected WAGO devices.
How do I fix CVE-2019-12549?
To fix CVE-2019-12549, update the firmware of the affected WAGO devices to the latest version provided by the manufacturer.
Which WAGO devices are impacted by CVE-2019-12549?
CVE-2019-12549 affects WAGO 852-303, 852-1305, and 852-1505 devices with specific firmware versions prior to their respective updates.
What are the consequences of CVE-2019-12549?
The consequences of CVE-2019-12549 include potential unauthorized access through the SSH daemon due to the presence of hardcoded keys.
Is there a workaround for CVE-2019-12549?
A temporary workaround for CVE-2019-12549 includes restricting network access to the affected devices until firmware updates can be applied.