CVE-2019-12549

EPSS 0.84%
Published 17.06.2019 17:15:11
Last modified 21.11.2024 04:23:04
Source cve@mitre.org
Teams watchlist Login
Open Login

WAGO 852-303 before FW06, 852-1305 before FW06, and 852-1505 before FW03 devices contain hardcoded private keys for the SSH daemon. The fingerprint of the SSH host key from the corresponding SSH daemon matches the embedded private key.

Affected products Warnungen 0 Metrics 3 CWE 1 References 6

Data is provided by the National Vulnerability Database (NVD)

Wago ≫ 852-303 Firmware Version < 1.2.2.s0

Wago ≫ 852-303 Version-

Wago ≫ 852-1305 Firmware Version < 1.1.6.s0

Wago ≫ 852-1305 Version-

Wago ≫ 852-1505 Firmware Version < 1.1.5.s0

Wago ≫ 852-1505 Version-

Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.

EPSS Metriken
Type	Source	Score	Percentile
EPSS	FIRST.org	0.84%	0.725

CVSS Metriken
Source	Base Score	Exploit Score	Impact Score	Vector string
nvd@nist.gov	9.8	3.9	5.9	CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
nvd@nist.gov	10	10	10	AV:N/AC:L/Au:N/C:C/I:C/A:C

CWE-798 Use of Hard-coded Credentials

The product contains hard-coded credentials, such as a password or cryptographic key.

https://cert.vde.com/en-us/advisories/vde-2019-013

Third Party Advisory

https://ics-cert.us-cert.gov/advisories/ICSA-19-164-02

Third Party Advisory

US Government Resource

https://www.wago.com/us/

Vendor Advisory

https://nvd.nist.gov/vuln/detail/CVE-2019-12549

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2019-12549

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2019-12549

EUVD