WAGO Industrial Managed Switches 852-303, 852-1305, and 852-1505
Successful exploitation of these vulnerabilities could allow a compromise of the managed switch, resulting in disruption of communication, and root access to the operating system.
describes (2)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2019-12550US | critical9.8OT elevated | — | ||
WAGO 852-303 before FW06, 852-1305 before FW06, and 852-1505 before FW03 devices contain hardcoded users and passwords that can be used to login via SSH and TELNET. | ||||
| CVE-2019-12549US | critical9.8OT elevated | — | ||
WAGO 852-303 before FW06, 852-1305 before FW06, and 852-1505 before FW03 devices contain hardcoded private keys for the SSH daemon. The fingerprint of the SSH host key from the cor… | ||||
references
External citations — patches, advisories, analysis.
- ICS Advisory ICSA-19-164-02 JSONself
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
remediations (6)
- MitigationIndustrial Managed Switch 852-1305
Do not directly connect the device to the Internet.
- MitigationIndustrial Managed Switch 852-1305
Do not directly connect the device to the Internet.
- MitigationIndustrial Managed Switch 852-1505
Do not directly connect the device to the Internet.
- MitigationIndustrial Managed Switch 852-1505
Do not directly connect the device to the Internet.
- MitigationIndustrial Managed Switch 852-303
Do not directly connect the device to the Internet.
- MitigationIndustrial Managed Switch 852-303
Do not directly connect the device to the Internet.
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan