Vulnerability Details CVE-2015-6473
WAGO IO 750-849 01.01.27 and WAGO IO 750-881 01.02.05 do not contain privilege separation.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.01
EPSS Ranking 75.6%
CVSS Severity
CVSS v3 Score 9.8
CVSS v2 Score 10.0
References
- http://packetstormsecurity.com/files/136077/WAGO-IO-PLC-758-870-750-849-Credential-Management-Privilege-Separation.html
- http://seclists.org/fulldisclosure/2016/Mar/4
- http://www.securityfocus.com/bid/84138
- http://packetstormsecurity.com/files/136077/WAGO-IO-PLC-758-870-750-849-Credential-Management-Privilege-Separation.html
- http://seclists.org/fulldisclosure/2016/Mar/4
- http://www.securityfocus.com/bid/84138
Products affected by CVE-2015-6473
-
cpe:2.3:h:wago:750-849:-
-
cpe:2.3:h:wago:758-870:-
-
cpe:2.3:o:wago:750-849_firmware:01.01.27
-
cpe:2.3:o:wago:758-870_firmware:01.01.27
-
cpe:2.3:o:wago:758-870_firmware:01.02.05