Summary
Successful exploitation of these vulnerabilities could allow a compromise of the managed switch, resulting in disruption of communication, and root access to the operating system.
Vulnerabilities 2
-
Unscored —
WAGO 852-303 before FW06, 852-1305 before FW06, and 852-1505 before FW03 devices contain hardcoded private keys for the…
-
Unscored —
WAGO 852-303 before FW06, 852-1305 before FW06, and 852-1505 before FW03 devices contain hardcoded users and passwords …
Revision history
-
#1
ICSA-19-164-02 WAGO Industrial Managed Switches 852-303, 852-1305, and 852-1505
References
-
ICS Advisory ICSA-19-164-02 Web Version
https://www.cisa.gov/news-events/ics-advisories/icsa-19-164-02
-
Recommended Practices
https://www.cisa.gov/news-events/ics-advisories/icsa-19-164-02
-
Recommended Practices
https://www.cisa.gov/uscert/sites/default/files/recommended_practices/NCCIC_ICS-CERT_Defense_in_Depth_2016_S508C.pdf
-
Recommended Practices
https://www.cisa.gov/uscert/ics/tips/ICS-TIP-12-146-01B