CVE-2016-9362 An issue was discovered in WAGO 750-8202/PFC200 prior to FW04 (released August 2015), WAGO 750-881 prior to FW09 (released August 2016), and WAGO 0758-0874-0000-0111. By accessing a specific uniform r...
CriticalCVSS 9.1
EPSS 2.1%
- Published
- Updated
- Exploit status
- No public exploit known
Description
An issue was discovered in WAGO 750-8202/PFC200 prior to FW04 (released August 2015), WAGO 750-881 prior to FW09 (released August 2016), and WAGO 0758-0874-0000-0111. By accessing a specific uniform resource locator (URL) on the web server, a malicious user is able to edit and to view settings without authenticating.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| WAGO pfc200 firmware | All versions | No fix listed |
| WAGO 750-xxxx series firmware | All versions | No fix listed |
| WAGO 758-xxxx series firmware | All versions | No fix listed |
References
- 95074 third-party-advisory vdb-entry
- ics-cert.us-cert.gov third-party-advisory us-government-resource