WAGO 852 Bypass Code Execution

The vulnerability of the web-based interface for controlling Microprogramming Software Industrial Control Switches WAGO 852 is related to the use of a rigidly encrypted cryptographic key. Exploiting this vulnerability allows an attacker to bypass existing security mechanisms and execute arbitrary...

CVE-2019-12549

WAGO 852-303 before FW06, 852-1305 before FW06, and 852-1505 before FW03 devices contain hardcoded private keys for the SSH daemon. The fingerprint of the SSH host key from the corresponding SSH daemon matches the embedded private key...

CVE-2019-12550: Use of Hard-coded Credentials

WAGO 852-303 before FW06, 852-1305 before FW06, and 852-1505 before FW03 devices contain hardcoded users and passwords that can be used to login via SSH and TELNET...

CVE-2019-12549: Use of Hard-coded Credentials

WAGO 852-303 before FW06, 852-1305 before FW06, and 852-1505 before FW03 devices contain hardcoded private keys for the SSH daemon. The fingerprint of the SSH host key from the corresponding SSH daemon matches the embedded private key...

PT-2019-3574

Name of the Vulnerable Software and Affected Versions WAGO 852-303 versions before FW06 WAGO 852-1305 versions before FW06 WAGO 852-1505 versions before FW03 Description The issue is related to hardcoded private keys for the SSH daemon in the affected devices. This means that the SSH host key...

WAGO 852 Industrial Managed Switch Series Code Execution / Hardcoded Credentials

SEC Consult Vulnerability Lab Security Advisory ======================================================================= title: Multiple vulnerabilities product: WAGO 852 Industrial Managed Switch Series vulnerable version: 852-303: v1.2.2.S0 852-1305: v1.1.6.S0 852-1505: v1.1.5.S0 fixed version:...

PT-2019-3573

Name of the Vulnerable Software and Affected Versions WAGO 852-303 versions before FW06 WAGO 852-1305 versions before FW06 WAGO 852-1505 versions before FW03 Description The issue is related to hardcoded users and passwords in the devices, which can be used for login via SSH and TELNET protocols...