VYPR

852 303 Firmware

by Wago

CVEs (2)

  • CVE-2019-12550CriJun 17, 2019
    risk 0.64cvss 9.8epss 0.03

    WAGO 852-303 before FW06, 852-1305 before FW06, and 852-1505 before FW03 devices contain hardcoded users and passwords that can be used to login via SSH and TELNET.

  • CVE-2019-12549CriJun 17, 2019
    risk 0.64cvss 9.8epss 0.03

    WAGO 852-303 before FW06, 852-1305 before FW06, and 852-1505 before FW03 devices contain hardcoded private keys for the SSH daemon. The fingerprint of the SSH host key from the corresponding SSH daemon matches the embedded private key.