Description
WAGO 852-303 before FW06, 852-1305 before FW06, and 852-1505 before FW03 devices contain hardcoded private keys for the SSH daemon. The fingerprint of the SSH host key from the corresponding SSH daemon matches the embedded private key.
Advisories 2
- ICSA-19-164-02 WAGO Industrial Managed Switches 852-303, 852-1305, and 852-1505 CISA ICS & IT advisories · Jun 13, 2019
- VDE-2019-013 WAGO: Multiple Vulnerabilities in industrial managed switches CERT@VDE · Jun 12, 2019