WAGO: XSS vulnerability in Web-UI in WAGO 750-88X and WAGO 750-89X
The Web-Based Management (WBM) of WAGOs programmable logic controller (PLC) is typically used for administration, commissioning and updates. The SNMP configuration page of the device is vulnerable for a persistent XSS (Cross-Site Scripting) attack.
describes (1)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2018-16210US | medium6.1 | — | ||
WAGO 750-88X and WAGO 750-89X Ethernet Controller devices, versions 01.09.18(13) and before, have XSS in the SNMP configuration via the webserv/cplcfg/snmp.ssi SNMP_DESC or SNMP_LO… | ||||
references
External citations — patches, advisories, analysis.
remediations (2)
- Mitigation
* Restrict network access to the device. * Use strong passwords * Do not directly connect the device to the internet * Disable unused TCP/UDP-ports
- Fixed
update devices | Product | Fixed Versions | |------------------|----------------| | 750-362 | FW05 | | 750-363 | FW05 | | 750-823 | FW05 | | 750-832/xxx-xxx | FW05 | | 750-862 | FW05 | | 750-891 | FW05 | | 750-890/xxx-xxx | FW05 | | 750-352 | FW14 | | 750-831/xxx-xxx | FW14 | | 750-852 | FW14 | | 750-880/xxx-xxx | FW14 | | 750-881 | FW14 | | 750-889 | FW14 |
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan