First published: Tue Sep 29 2020(Updated: )
Improper Authentication vulnerability in WAGO 750-8XX series with FW version <= FW07 allows an attacker to change some special parameters without authentication. This issue affects: WAGO 750-852, WAGO 750-880/xxx-xxx, WAGO 750-881, WAGO 750-831/xxx-xxx, WAGO 750-882, WAGO 750-885/xxx-xxx, WAGO 750-889 in versions FW07 and below.
Credit: info@cert.vde.com
Affected Software | Affected Version | How to fix |
---|---|---|
Wago 750-852 Firmware | <=fw07 | |
WAGO 750-852 | ||
Wago 750-880 Firmware | <=fw07 | |
WAGO 750-880 | ||
Wago 750-881 Firmware | <=fw07 | |
WAGO 750-881 | ||
Wago 750-831 Firmware | <=fw07 | |
WAGO 750-831 | ||
Wago 750-882 Firmware | <=fw07 | |
WAGO 750-882 | ||
Wago 750-885 Firmware | <=fw07 | |
WAGO 750-885 | ||
Wago 750-889 Firmware | <=fw07 | |
WAGO 750-889 |
Upgrade devices to the latest standard firmware (> FW07).
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2020-12505 is an improper authentication vulnerability in WAGO 750-8XX series with FW version <= FW07 that allows an attacker to change special parameters without authentication.
WAGO 750-852, WAGO 750-880, WAGO 750-881, WAGO 750-831, WAGO 750-882, WAGO 750-885, WAGO 750-889.
CVE-2020-12505 has a severity rating of critical with a CVSS score of 8.2.
An attacker can exploit CVE-2020-12505 by changing special parameters without authentication.
There is currently no known fix for CVE-2020-12505. It is recommended to contact the vendor for further guidance.