CVE-2019-10712

Published: May 7, 2019Modified: Jun 17, 2026

9.8

Vector

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Exploitability: 3.9 / Impact: 5.9

Source: NVD

Description

The Web-GUI on WAGO Series 750-88x (750-330, 750-352, 750-829, 750-831, 750-852, 750-880, 750-881, 750-882, 750-884, 750-885, 750-889) and Series 750-87x (750-830, 750-849, 750-871, 750-872, 750-873) devices has undocumented service access.

Affected (16)

Products: Wago: 750 830 Firmware, 750 849 Firmware, 750 871 Firmware, 750 872 Firmware, 750 873 Firmware, 750 330 Firmware, 750 352 Firmware, 750 829 Firmware, 750 831 Firmware, 750 852 Firmware, 750 880 Firmware, 750 881 Firmware, 750 882 Firmware, 750 884 Firmware, 750 885 Firmware, 750 889 Firmware

16 products

Configuration A

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Wago 750 830 Firmware	Before 06

Running on/with	Platform Versions
Wago 750 830	All versions

Configuration B

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Wago 750 849 Firmware	Before 08

Running on/with	Platform Versions
Wago 750 849	All versions

Configuration C

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Wago 750 871 Firmware	Before 11

Running on/with	Platform Versions
Wago 750 871	All versions

Configuration D

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Wago 750 872 Firmware	Before 07

Running on/with	Platform Versions
Wago 750 872	All versions

Configuration E

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Wago 750 873 Firmware	Before 07

Running on/with	Platform Versions
Wago 750 873	All versions

Configuration F

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Wago 750 330 Firmware	Before 14

Running on/with	Platform Versions
Wago 750 330	All versions

Configuration G

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Wago 750 352 Firmware	Before 14

Running on/with	Platform Versions
Wago 750 352	All versions

Configuration H

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Wago 750 829 Firmware	Before 14

Running on/with	Platform Versions
Wago 750 829	All versions

Configuration I

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Wago 750 831 Firmware	Before 14

Running on/with	Platform Versions
Wago 750 831	All versions

Configuration J

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Wago 750 852 Firmware	Before 14

Running on/with	Platform Versions
Wago 750 852	All versions

Configuration K

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Wago 750 880 Firmware	Before 14

Running on/with	Platform Versions
Wago 750 880	All versions

Configuration L

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Wago 750 881 Firmware	Before 14

Running on/with	Platform Versions
Wago 750 881	All versions

Configuration M

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Wago 750 882 Firmware	Before 14

Running on/with	Platform Versions
Wago 750 882	All versions

Configuration N

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Wago 750 884 Firmware	Before 14

Running on/with	Platform Versions
Wago 750 884	All versions

Configuration O

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Wago 750 885 Firmware	Before 14

Running on/with	Platform Versions
Wago 750 885	All versions

Configuration P

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Wago 750 889 Firmware	Before 14

Running on/with	Platform Versions
Wago 750 889	All versions

Related CWEs

CWE-798

Use of Hard-coded Credentials

The product contains hard-coded credentials, such as a password or cryptographic key.

References (18)

http://www.securityfocus.com/bid/108482

Source: cve@mitre.org

https://cert.vde.com/de-de/advisories/vde-2019-008

Source: cve@mitre.org

Third Party Advisory

https://lists.apache.org/thread.html/r0066c1e862613de402fee04e81cbe00bcd64b64a2711beb9a13c3b25%40%3Ccommits.cassandra.apache.org%3E

Source: cve@mitre.org

https://lists.apache.org/thread.html/r25e25973e9577c62fd0221b4b52990851adf11cbe33036bd67d4b13d%40%3Ccommits.cassandra.apache.org%3E

Source: cve@mitre.org

https://lists.apache.org/thread.html/r37eb6579fa0bf94a72b6c978e2fee96f68a2b1b3ac1b1ce60aee86cf%40%3Ccommits.cassandra.apache.org%3E

Source: cve@mitre.org

https://lists.apache.org/thread.html/r386966780034aadee69ffd82d44555117c9339545b9ce990fe490a3e%40%3Ccommits.cassandra.apache.org%3E

Source: cve@mitre.org

https://lists.apache.org/thread.html/r80e8882c86c9c17a57396a5ef7c4f08878d629a0291243411be0de3a%40%3Ccommits.cassandra.apache.org%3E

Source: cve@mitre.org

https://lists.apache.org/thread.html/ra37700b842790883b9082e6b281fb7596f571b13078a4856cd38f2c2%40%3Ccommits.cassandra.apache.org%3E

Source: cve@mitre.org

https://lists.apache.org/thread.html/rb47911c179c9f3e8ea3f134b5645e63cd20c6fc63bd0b43ab5864bd1%40%3Ccommits.cassandra.apache.org%3E

Source: cve@mitre.org

http://www.securityfocus.com/bid/108482