cbcvebase.
CVE-2020-12505
published 2020-09-30

CVE-2020-12505: Improper Authentication vulnerability in WAGO 750-8XX series with FW version <= FW07 allows an attacker to change some special parameters without…

PriorityP357critical9.1CVSS 3.1
AVNACLPRNUINSUCNIHAH
EPSS
1.25%
65.8th percentile
Improper Authentication vulnerability in WAGO 750-8XX series with FW version <= FW07 allows an attacker to change some special parameters without authentication. This issue affects: WAGO 750-852, WAGO 750-880/xxx-xxx, WAGO 750-881, WAGO 750-831/xxx-xxx, WAGO 750-882, WAGO 750-885/xxx-xxx, WAGO 750-889 in versions FW07 and below.

Affected

14 ranges
VendorProductVersion rangeFixed in
wago750-831_firmware<= fw07—
wago750-831_xxx-xxxunspecified – FW07—
wago750-852unspecified – FW07—
wago750-852_firmware<= fw07—
wago750-880_firmware<= fw07—
wago750-880_xxx-xxxunspecified – FW07—
wago750-881unspecified – FW07—
wago750-881_firmware<= fw07—
wago750-882unspecified – FW07—
wago750-882_firmware<= fw07—
wago750-885_firmware<= fw07—
wago750-885_xxx-xxxunspecified – FW07—
wago750-889unspecified – FW07—
wago750-889_firmware<= fw07—

CVSS provenance

nvdv3.19.1CRITICALCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H
nvdv2.06.4MEDIUMAV:N/AC:L/Au:N/C:N/I:P/A:P
Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.