CVE-2020-12505: Improper Authentication vulnerability in WAGO 750-8XX series with FW version <= FW07 allows an attacker to change some special parameters without authentication

Description

Improper Authentication vulnerability in WAGO 750-8XX series with FW version <= FW07 allows an attacker to change some special parameters without authentication. This issue affects: WAGO 750-852, WAGO 750-880/xxx-xxx, WAGO 750-881, WAGO 750-831/xxx-xxx, WAGO 750-882, WAGO 750-885/xxx-xxx, WAGO 750-889 in versions FW07 and below.

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H

Attack vector

Network

Complexity

Low

Privileges

None

User interaction

None

Confidentiality

None

Integrity

Low

Availability

High

Scope

Unchanged

Exploitation

Is it being used?

Exploit prediction (EPSS)1.2% · higher than 69% of CVEs

Exploited in the wildNo evidence yet

CISA KEVNot listed

Ransomware campaign useNot known

Affected products

Which versions

7F

750-831 Firmware · Wago

through fw07 · source: NVD

7F

750-852 Firmware · Wago

through fw07 · source: NVD

7F

750-880 Firmware · Wago

through fw07 · source: NVD

7F

750-881 Firmware · Wago

through fw07 · source: NVD

7F

750-882 Firmware · Wago

through fw07 · source: NVD

7F

750-885 Firmware · Wago

through fw07 · source: NVD

7F

750-889 Firmware · Wago

through fw07 · source: NVD