CVE:CVE-2018-12979
CNNVD:CNNVD-201807-1127
WAGO e!DISPLAY是德国WAGO公司的一套基于Web的自动化控制面板。
使用FW 02之前版本固件的WAGO e!DISPLAY 762-3000版本至762-3003版本中存在安全漏洞。攻击者可借助文件上传功能利用该漏洞覆盖重要文件。
solution:Upgrade wago 762-3000_firmware to a higher version than 02,and avoid the version (,02); Upgrade wago 762-3001_firmware to a higher version than 02,and avoid the version (,02); Upgrade wago 762-3002_firmware to a higher version than 02,and avoid the version (,02); Upgrade wago 762-3003_firmware to a higher version than 02,and avoid the version (,02)