Summary
Multiple vulnerabilities have been identified in WAGO 852-303, 852-1305 and 852-1505 industrial managed ethernet switches.
Details
Impact
(see cve details)
Remediation
Update your managed switch to the latest firmware:
852-303 (>= V1.2.2.S0)
852-1305 (>= V1.1.6.S0)
852-1505 (>= V1.1.5.S0)
Firmwares published on Jun 7, 2019 or later are fixed.
Please refer to the corresponding manual.
Vulnerabilities 19
-
High 8.8
In the add_match function in libbb/lineedit.c in BusyBox through 1.27.2, the tab autocomplete feature of the shell, use…
-
High 7.5
The recv_and_process_client_pkt function in networking/ntpd.c in busybox allows remote attackers to cause a denial of s…
-
Unscored —
The encode_name macro in misc/mntent_r.c in the GNU C Library (aka glibc or libc6) 2.11.1 and earlier, as used by ncpmo…
-
Unscored —
ld.so in the GNU C Library (aka glibc or libc6) before 2.11.3, and 2.12.x before 2.12.2, does not properly restrict use…
-
Unscored —
The DHCP client (udhcpc) in BusyBox before 1.20.0 allows remote DHCP servers to execute arbitrary commands via shell me…
-
Unscored —
Directory traversal vulnerability in the BusyBox implementation of tar before 1.22.0 v5 allows remote attackers to poin…
-
Unscored —
Integer overflow in string/strcoll_l.c in the GNU C Library (aka glibc or libc6) 2.17 and earlier allows context-depend…
-
Unscored —
util-linux/mdev.c in BusyBox before 1.21.0 uses 0777 permissions for parent directories when creating nested directorie…
-
Unscored —
The posix_spawn_file_actions_addopen function in glibc before 2.20 does not copy its path argument in accordance with t…
-
Unscored —
The nss_dns implementation of getnetbyname in GNU C Library (aka glibc) before 2.21, when the DNS backend in the Name S…
-
Unscored —
Multiple stack-based buffer overflows in the GNU C Library (aka glibc or libc6) before 2.23 allow context-dependent att…
-
Unscored —
nscd in the GNU C Library (aka glibc or libc6) before version 2.20 does not correctly compute the size of an internal b…
-
Unscored —
Heap-based buffer overflow in the __nss_hostname_digits_dots function in glibc 2.2, and other 2.x versions before 2.18,…
-
Unscored —
The ADDW macro in stdio-common/vfscanf.c in the GNU C Library (aka glibc or libc6) before 2.21 does not properly consid…
-
Unscored —
huft_build in archival/libarchive/decompress_gunzip.c in BusyBox before 1.27.2 misuses a pointer, causing segfaults and…
-
Unscored —
Integer overflow in the DHCP client (udhcpc) in BusyBox before 1.25.0 allows remote attackers to cause a denial of serv…
-
Unscored —CVE-2016-2148 EPSS 27%
Heap-based buffer overflow in the DHCP client (udhcpc) in BusyBox before 1.25.0 allows remote attackers to have unspeci…
-
Unscored —
WAGO 852-303 before FW06, 852-1305 before FW06, and 852-1505 before FW03 devices contain hardcoded private keys for the…
-
Unscored —
WAGO 852-303 before FW06, 852-1305 before FW06, and 852-1505 before FW03 devices contain hardcoded users and passwords …
Revision history
-
#1
Initial revision.
References
-
VDE-2019-013: WAGO: Multiple Vulnerabilities in industrial managed switches - HTML
https://certvde.com/en/advisories/VDE-2019-013/
-
Vendor PSIRT
https://www.wago.com/psirt
-
CERT@VDE Security Advisories for WAGO GmbH & Co. KG
https://certvde.com/en/advisories/vendor/wago/