title: WAGO: Authentication Vulnerability in Web-Based Management
description: This vulnerability allows an attacker who has access to the WBM to read and write settings-parameters of the device by sending specifically constructed requests without authentication on multiple WAGO PLCs in firmware versions up to FW07.
problem types: CWE-287 Improper Authentication
affected:
{
product: PLC
vendor: WAGO
versions:
lessThanOrEqual: FW07, status: affected, version: 750-362, versionType: custom
lessThanOrEqual: FW07, status: affected, version: 750-363, versionType: custom
lessThanOrEqual: FW07, status: affected, version: 750-823, versionType: custom
lessThanOrEqual: FW07, status: affected, version: 750-832/xxx-xxx, versionType: custom
lessThanOrEqual: FW07, status: affected, version: 750-862, versionType: custom
lessThanOrEqual: FW07, status: affected, version: 750-891, versionType: custom
lessThanOrEqual: FW07, status: affected, version: 750-890/xxx-xxx, versionType: custom
lessThanOrEqual: FW07, status: affected, version: 750-893, versionType: custom
}
metrics:
cvssV3_1: [
attackComplexity: LOW
attackVector: NETWORK
availabilityImpact: HIGH
baseScore: 9.8
baseSeverity: CRITICAL
confidentialityImpact: HIGH
integrityImpact: HIGH
privilegesRequired: NONE
scope: UNCHANGED
userInteraction: NONE
vectorString: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
version: 3.1
]
solutions: Update the device to the latest FW version.
workarounds: Restrict network access to the device.
Do not directly connect the device to the internet.
Disable unused TCP/UDP ports.
Disable web-based management ports 80/443 after the configuration phase