WAGO: XSS vulnerability in Web-UI in WAGO 750-88X and WAGO 750-89X
The Web-Based Management (WBM) of WAGOs programmable logic controller (PLC) is typically used for administration, commissioning and updates. The SNMP configuration page of the device is vulnerable for a persistent XSS (Cross-Site Scripting) attack.
beschreibt (1)
Zugehörige CVEs.
| ID | Schweregrad | ausnutzbar | ||
|---|---|---|---|---|
| CVE-2018-16210US | medium6.1 | — | ||
WAGO 750-88X and WAGO 750-89X Ethernet Controller devices, versions 01.09.18(13) and before, have XSS in the SNMP configuration via the webserv/cplcfg/snmp.ssi SNMP_DESC or SNMP_LO… | ||||
Referenzen
Externe Belege — Patches, Meldungen, Analysen.
Behebungen (2)
- Mitigation
* Restrict network access to the device. * Use strong passwords * Do not directly connect the device to the internet * Disable unused TCP/UDP-ports
- Behoben
update devices | Product | Fixed Versions | |------------------|----------------| | 750-362 | FW05 | | 750-363 | FW05 | | 750-823 | FW05 | | 750-832/xxx-xxx | FW05 | | 750-862 | FW05 | | 750-891 | FW05 | | 750-890/xxx-xxx | FW05 | | 750-352 | FW14 | | 750-831/xxx-xxx | FW14 | | 750-852 | FW14 | | 750-880/xxx-xxx | FW14 | | 750-881 | FW14 | | 750-889 | FW14 |
Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan