WAGO Industrial Managed Switches 852-303, 852-1305, and 852-1505
Successful exploitation of these vulnerabilities could allow a compromise of the managed switch, resulting in disruption of communication, and root access to the operating system.
beschreibt (2)
Zugehörige CVEs.
| ID | Schweregrad | ausnutzbar | ||
|---|---|---|---|---|
| CVE-2019-12550US | critical9.8OT erhöht | — | ||
WAGO 852-303 before FW06, 852-1305 before FW06, and 852-1505 before FW03 devices contain hardcoded users and passwords that can be used to login via SSH and TELNET. | ||||
| CVE-2019-12549US | critical9.8OT erhöht | — | ||
WAGO 852-303 before FW06, 852-1305 before FW06, and 852-1505 before FW03 devices contain hardcoded private keys for the SSH daemon. The fingerprint of the SSH host key from the cor… | ||||
Referenzen
Externe Belege — Patches, Meldungen, Analysen.
- ICS Advisory ICSA-19-164-02 JSONself
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
Behebungen (6)
- MitigationIndustrial Managed Switch 852-1305
Do not directly connect the device to the Internet.
- MitigationIndustrial Managed Switch 852-1305
Do not directly connect the device to the Internet.
- MitigationIndustrial Managed Switch 852-1505
Do not directly connect the device to the Internet.
- MitigationIndustrial Managed Switch 852-1505
Do not directly connect the device to the Internet.
- MitigationIndustrial Managed Switch 852-303
Do not directly connect the device to the Internet.
- MitigationIndustrial Managed Switch 852-303
Do not directly connect the device to the Internet.
Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan