Description (CNA)
Certain devices in the WAGO System I/O Field series activate an internal diagnostic capability during the initial startup sequence. This functionality is not formally documented and becomes accessible without authentication for a brief period in the early boot phase. During this window, an unauthenticated remote attacker can gain access to the internal system processes, resulting in full system compromise.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| WAGO / 0765-110x/0100-0000 | affected 1.0.0.0 before 1.2.1.100 |
| WAGO / 0765-120x/0100-0000 | affected 1.0.0.0 before 1.2.7.100 |
| WAGO / 0765-150x/0100-0000 | affected 1.0.0.0 before 1.2.7.103 |
| WAGO / 0765-2101/0100-0000 | affected 1.0.0.0 before 1.2.1.102 |
| WAGO / 0765-2102/0100-0000 | affected 1.0.0.0 before 1.2.5.101 |
| WAGO / 0765-410x/0100-0000 | affected 1.0.0.0 before 1.2.1.100 |
| WAGO / 0765-420x/0100-0000 | affected 1.0.0.0 before 1.2.7.100 |
| WAGO / 0765-450x/0100-0000 | affected 1.0.0.0 before 1.2.7.103 |
CWE
CWE-912
References
ADP enrichment
No English description supplied.
No references supplied.