Lucene search

[email protected]CVE-2015-6472

HistoryAug 22, 2017 - 6:29 p.m.

CVE-2015-6472

2017-08-2218:29:00

CWE-255

[email protected]

web.nvd.nist.gov

cve-2015-6472

wago io

weak credentials

nvd

security issue

9.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

6.8 Medium

AI Score

Confidence

Low

5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:N/A:N

0.008 Low

EPSS

Percentile

81.7%

JSON

WAGO IO 750-849 01.01.27 and 01.02.05, WAGO IO 750-881, and WAGO IO 758-870 have weak credential management.

CPENameOperatorVersion
wago:750-849_firmwarewago 750-849 firmwareeq01.01.27
wago:750-849_firmwarewago 750-849 firmwareeq01.02.05
wago:750-881_firmwarewago 750-881 firmwareeq01.01.27
wago:750-881_firmwarewago 750-881 firmwareeq01.02.05
wago:758-870_firmwarewago 758-870 firmwareeq01.01.27
wago:758-870_firmwarewago 758-870 firmwareeq01.02.05

CPE	Name	Operator	Version
wago:750-849_firmware	wago 750-849 firmware	eq	01.01.27
wago:750-849_firmware	wago 750-849 firmware	eq	01.02.05
wago:750-881_firmware	wago 750-881 firmware	eq	01.01.27
wago:750-881_firmware	wago 750-881 firmware	eq	01.02.05
wago:758-870_firmware	wago 758-870 firmware	eq	01.01.27
wago:758-870_firmware	wago 758-870 firmware	eq	01.02.05

References

packetstormsecurity.com/files/136077/WAGO-IO-PLC-758-870-750-849-Credential-Management-Privilege-Separation.html

seclists.org/fulldisclosure/2016/Mar/4

www.securityfocus.com/bid/84138

Social References

9.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

6.8 Medium

AI Score

Confidence

Low

5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:N/A:N

0.008 Low

EPSS

Percentile

81.7%

JSON

Related for CVE-2015-6472

cvelist1 prion1 nessus1 packetstorm1