CVE-2019-10712

CVSS V2 High 7.5 CVSS V3 Critical 9.8
Description
The Web-GUI on WAGO Series 750-88x (750-330, 750-352, 750-829, 750-831, 750-852, 750-880, 750-881, 750-882, 750-884, 750-885, 750-889) and Series 750-87x (750-830, 750-849, 750-871, 750-872, 750-873) devices has undocumented service access.
Overview
  • CVE ID
  • CVE-2019-10712
  • Assigner
  • cve@mitre.org
  • Vulnerability Status
  • Modified
  • Published Version
  • 2019-05-07T22:29:00
  • Last Modified Date
  • 2020-10-01T11:15:12
Weakness Enumerations
CWE URL
CWE-798 http://cwe.mitre.org/data/definitions/798.html
CPE Configuration (Product)
CPE Vulnerable Operator Version Start Version End
AND
cpe:2.3:o:wago:750-830_firmware:*:*:*:*:*:*:*:* 1 OR 06
cpe:2.3:h:wago:750-830:-:*:*:*:*:*:*:* 0 OR
AND
cpe:2.3:o:wago:750-849_firmware:*:*:*:*:*:*:*:* 1 OR 08
cpe:2.3:h:wago:750-849:-:*:*:*:*:*:*:* 0 OR
AND
cpe:2.3:o:wago:750-871_firmware:*:*:*:*:*:*:*:* 1 OR 11
cpe:2.3:h:wago:750-871:-:*:*:*:*:*:*:* 0 OR
AND
cpe:2.3:o:wago:750-872_firmware:*:*:*:*:*:*:*:* 1 OR 07
cpe:2.3:h:wago:750-872:-:*:*:*:*:*:*:* 0 OR
AND
cpe:2.3:o:wago:750-873_firmware:*:*:*:*:*:*:*:* 1 OR 07
cpe:2.3:h:wago:750-873:-:*:*:*:*:*:*:* 0 OR
AND
cpe:2.3:o:wago:750-330_firmware:*:*:*:*:*:*:*:* 1 OR 14
cpe:2.3:h:wago:750-330:-:*:*:*:*:*:*:* 0 OR
AND
cpe:2.3:o:wago:750-352_firmware:*:*:*:*:*:*:*:* 1 OR 14
cpe:2.3:h:wago:750-352:-:*:*:*:*:*:*:* 0 OR
AND
cpe:2.3:o:wago:750-829_firmware:*:*:*:*:*:*:*:* 1 OR 14
cpe:2.3:h:wago:750-829:-:*:*:*:*:*:*:* 0 OR
AND
cpe:2.3:o:wago:750-831_firmware:*:*:*:*:*:*:*:* 1 OR 14
cpe:2.3:h:wago:750-831:-:*:*:*:*:*:*:* 0 OR
AND
cpe:2.3:o:wago:750-852_firmware:*:*:*:*:*:*:*:* 1 OR 14
cpe:2.3:h:wago:750-852:-:*:*:*:*:*:*:* 0 OR
AND
cpe:2.3:o:wago:750-880_firmware:*:*:*:*:*:*:*:* 1 OR 14
cpe:2.3:h:wago:750-880:-:*:*:*:*:*:*:* 0 OR
AND
cpe:2.3:o:wago:750-881_firmware:*:*:*:*:*:*:*:* 1 OR 14
cpe:2.3:h:wago:750-881:-:*:*:*:*:*:*:* 0 OR
AND
cpe:2.3:o:wago:750-882_firmware:*:*:*:*:*:*:*:* 1 OR 14
cpe:2.3:h:wago:750-882:-:*:*:*:*:*:*:* 0 OR
AND
cpe:2.3:o:wago:750-884_firmware:*:*:*:*:*:*:*:* 1 OR 14
cpe:2.3:h:wago:750-884:-:*:*:*:*:*:*:* 0 OR
AND
cpe:2.3:o:wago:750-885_firmware:*:*:*:*:*:*:*:* 1 OR 14
cpe:2.3:h:wago:750-885:-:*:*:*:*:*:*:* 0 OR
AND
cpe:2.3:o:wago:750-889_firmware:*:*:*:*:*:*:*:* 1 OR 14
cpe:2.3:h:wago:750-889:-:*:*:*:*:*:*:* 0 OR
CVSS Version 2
  • Version
  • 2.0
  • Vector String
  • AV:N/AC:L/Au:N/C:P/I:P/A:P
  • Access Vector
  • NETWORK
  • Access Compatibility
  • LOW
  • Authentication
  • NONE
  • Confidentiality Impact
  • PARTIAL
  • Integrity Impact
  • PARTIAL
  • Availability Impact
  • PARTIAL
  • Base Score
  • 7.5
  • Severity
  • HIGH
  • Exploitability Score
  • 10
  • Impact Score
  • 6.4
CVSS Version 3
  • Version
  • 3.0
  • Vector String
  • CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
  • Attack Vector
  • NETWORK
  • Attack Compatibility
  • LOW
  • Privileges Required
  • NONE
  • User Interaction
  • NONE
  • Scope
  • UNCHANGED
  • Confidentiality Impact
  • HIGH
  • Availability Impact
  • HIGH
  • Base Score
  • 9.8
  • Base Severity
  • CRITICAL
  • Exploitability Score
  • 3.9
  • Impact Score
  • 5.9
References
Reference URL Reference Tags
https://cert.vde.com/de-de/advisories/vde-2019-008 Third Party Advisory
http://www.securityfocus.com/bid/108482
https://lists.apache.org/thread.html/r25e25973e9577c62fd0221b4b52990851adf11cbe33036bd67d4b13d@%3Ccommits.cassandra.apache.org%3E
https://lists.apache.org/thread.html/ra37700b842790883b9082e6b281fb7596f571b13078a4856cd38f2c2@%3Ccommits.cassandra.apache.org%3E
https://lists.apache.org/thread.html/r0066c1e862613de402fee04e81cbe00bcd64b64a2711beb9a13c3b25@%3Ccommits.cassandra.apache.org%3E
https://lists.apache.org/thread.html/r37eb6579fa0bf94a72b6c978e2fee96f68a2b1b3ac1b1ce60aee86cf@%3Ccommits.cassandra.apache.org%3E
https://lists.apache.org/thread.html/rb47911c179c9f3e8ea3f134b5645e63cd20c6fc63bd0b43ab5864bd1@%3Ccommits.cassandra.apache.org%3E
https://lists.apache.org/thread.html/r386966780034aadee69ffd82d44555117c9339545b9ce990fe490a3e@%3Ccommits.cassandra.apache.org%3E
https://lists.apache.org/thread.html/r80e8882c86c9c17a57396a5ef7c4f08878d629a0291243411be0de3a@%3Ccommits.cassandra.apache.org%3E
Sources
Source Name Source URL
NIST https://nvd.nist.gov/vuln/detail/CVE-2019-10712
MITRE https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-10712
History
Created Old Value New Value Data Type Notes
2022-05-10 17:11:28 Added to TrackCVE
2022-12-03 20:27:19 2019-05-07T22:29Z 2019-05-07T22:29:00 CVE Published Date updated
2022-12-03 20:27:19 2020-10-01T11:15:12 CVE Modified Date updated
2022-12-03 20:27:20 Modified Vulnerability Status updated