var-201702-0861
Vulnerability from variot
An issue was discovered in WAGO 750-8202/PFC200 prior to FW04 (released August 2015), WAGO 750-881 prior to FW09 (released August 2016), and WAGO 0758-0874-0000-0111. By accessing a specific uniform resource locator (URL) on the web server, a malicious user is able to edit and to view settings without authenticating. WAGO 750-8202 / PFC200 and so on are all bus editable logic controller modules of German WAGO company.
An authentication bypass vulnerability exists in several WAGO products. An attacker could use this vulnerability to bypass the authentication mechanism and perform unauthorized operations. This may lead to further attacks. The following products are vulnerable: WAGO 750-8202/PFC200 prior to FW04 WAGO 750-881 prior to FW09 WAGO 0758-0874-0000-0111. WAGO 750-8202/PFC200, etc
Show details on source website{ "@context": { "@vocab": "https://www.variotdbs.pl/ref/VARIoTentry#", "affected_products": { "@id": "https://www.variotdbs.pl/ref/affected_products" }, "configurations": { "@id": "https://www.variotdbs.pl/ref/configurations" }, "credits": { "@id": "https://www.variotdbs.pl/ref/credits" }, "cvss": { "@id": "https://www.variotdbs.pl/ref/cvss/" }, "description": { "@id": "https://www.variotdbs.pl/ref/description/" }, "exploit_availability": { "@id": "https://www.variotdbs.pl/ref/exploit_availability/" }, "external_ids": { "@id": "https://www.variotdbs.pl/ref/external_ids/" }, "iot": { "@id": "https://www.variotdbs.pl/ref/iot/" }, "iot_taxonomy": { "@id": "https://www.variotdbs.pl/ref/iot_taxonomy/" }, "patch": { "@id": "https://www.variotdbs.pl/ref/patch/" }, "problemtype_data": { "@id": "https://www.variotdbs.pl/ref/problemtype_data/" }, "references": { "@id": "https://www.variotdbs.pl/ref/references/" }, "sources": { "@id": "https://www.variotdbs.pl/ref/sources/" }, "sources_release_date": { "@id": "https://www.variotdbs.pl/ref/sources_release_date/" }, "sources_update_date": { "@id": "https://www.variotdbs.pl/ref/sources_update_date/" }, "threat_type": { "@id": "https://www.variotdbs.pl/ref/threat_type/" }, "title": { "@id": "https://www.variotdbs.pl/ref/title/" }, "type": { "@id": "https://www.variotdbs.pl/ref/type/" } }, "@id": "https://www.variotdbs.pl/vuln/VAR-201702-0861", "affected_products": { "@context": { "@vocab": "https://www.variotdbs.pl/ref/affected_products#", "data": { "@container": "@list" }, "sources": { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#" }, "@id": "https://www.variotdbs.pl/ref/sources" } }, "data": [ { "model": "758-xxxx series", "scope": "eq", "trust": 1.6, "vendor": "wago", "version": null }, { "model": "750-xxxx series", "scope": "eq", "trust": 1.6, "vendor": "wago", "version": null }, { "model": "pfc200", "scope": "eq", "trust": 1.6, "vendor": "wago", "version": null }, { "model": "750-xxxx series", "scope": null, "trust": 0.8, "vendor": "wago", "version": null }, { "model": "758-xxxx series", "scope": null, "trust": 0.8, "vendor": "wago", "version": null }, { "model": "pfc200", "scope": null, "trust": 0.8, "vendor": "wago", "version": null }, { "model": null, "scope": "eq", "trust": 0.6, "vendor": "wago", "version": "0758-0874-0000-0111" }, { "model": "\u003cfw09", "scope": "eq", "trust": 0.6, "vendor": "wago", "version": "750-881" }, { "model": "750-8202/pfc200 \u003cfw04", "scope": null, "trust": 0.6, "vendor": "wago", "version": null }, { "model": "pfc200", "scope": "eq", "trust": 0.3, "vendor": "wago", "version": "0" }, { "model": "wago", "scope": "eq", "trust": 0.3, "vendor": "wago", "version": "750-8810" }, { "model": "wago", "scope": "eq", "trust": 0.3, "vendor": "wago", "version": "750-82020" }, { "model": "wago", "scope": "eq", "trust": 0.3, "vendor": "wago", "version": "0758-0874-0000-0111" }, { "model": "pfc200 fw04", "scope": "ne", "trust": 0.3, "vendor": "wago", "version": null }, { "model": "fw09", "scope": "ne", "trust": 0.3, "vendor": "wago", "version": "750-881" }, { "model": "fw04", "scope": "ne", "trust": 0.3, "vendor": "wago", "version": "750-8202" } ], "sources": [ { "db": "CNVD", "id": "CNVD-2016-13097" }, { "db": "BID", "id": "95074" }, { "db": "JVNDB", "id": "JVNDB-2016-007990" }, { "db": "NVD", "id": "CVE-2016-9362" }, { "db": "CNNVD", "id": "CNNVD-201612-631" } ] }, "configurations": { "@context": { "@vocab": "https://www.variotdbs.pl/ref/configurations#", "children": { "@container": "@list" }, "cpe_match": { "@container": "@list" }, "data": { "@container": "@list" }, "nodes": { "@container": "@list" } }, "data": [ { "CVE_data_version": "4.0", "nodes": [ { "children": [ { "children": [], "cpe_match": [ { "cpe23Uri": "cpe:2.3:o:wago:pfc200_firmware:-:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true } ], "operator": "OR" }, { "children": [], "cpe_match": [ { "cpe23Uri": "cpe:2.3:h:wago:pfc200:-:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": false } ], "operator": "OR" } ], "cpe_match": [], "operator": "AND" }, { "children": [ { "children": [], "cpe_match": [ { "cpe23Uri": "cpe:2.3:o:wago:750-xxxx_series_firmware:-:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true } ], "operator": "OR" }, { "children": [], "cpe_match": [ { "cpe23Uri": "cpe:2.3:h:wago:750-8202:-:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": false }, { "cpe23Uri": "cpe:2.3:h:wago:750-881:-:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": false } ], "operator": "OR" } ], "cpe_match": [], "operator": "AND" }, { "children": [ { "children": [], "cpe_match": [ { "cpe23Uri": "cpe:2.3:o:wago:758-xxxx_series_firmware:-:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true } ], "operator": "OR" }, { "children": [], "cpe_match": [ { "cpe23Uri": "cpe:2.3:h:wago:758-874-0000-0111:-:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": false } ], "operator": "OR" } ], "cpe_match": [], "operator": "AND" } ] } ], "sources": [ { "db": "NVD", "id": "CVE-2016-9362" } ] }, "credits": { "@context": { "@vocab": "https://www.variotdbs.pl/ref/credits#", "sources": { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#" } } }, "data": "Maxim Rupp.", "sources": [ { "db": "BID", "id": "95074" }, { "db": "CNNVD", "id": "CNNVD-201612-631" } ], "trust": 0.9 }, "cve": "CVE-2016-9362", "cvss": { "@context": { "cvssV2": { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/cvss/cvssV2#" }, "@id": "https://www.variotdbs.pl/ref/cvss/cvssV2" }, "cvssV3": { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/cvss/cvssV3#" }, "@id": "https://www.variotdbs.pl/ref/cvss/cvssV3/" }, "severity": { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/cvss/severity#" }, "@id": "https://www.variotdbs.pl/ref/cvss/severity" }, "sources": { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#" }, "@id": "https://www.variotdbs.pl/ref/sources" } }, "data": [ { "cvssV2": [ { "acInsufInfo": false, "accessComplexity": "LOW", "accessVector": "NETWORK", "authentication": "NONE", "author": "NVD", "availabilityImpact": "NONE", "baseScore": 6.4, "confidentialityImpact": "PARTIAL", "exploitabilityScore": 10.0, "impactScore": 4.9, "integrityImpact": "PARTIAL", "obtainAllPrivilege": false, "obtainOtherPrivilege": false, "obtainUserPrivilege": false, "severity": "MEDIUM", "trust": 1.0, "userInteractionRequired": false, "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:N", "version": "2.0" }, { "acInsufInfo": null, "accessComplexity": "Low", "accessVector": "Network", "authentication": "None", "author": "NVD", "availabilityImpact": "Partial", "baseScore": 7.5, "confidentialityImpact": "Partial", "exploitabilityScore": null, "id": "CVE-2016-9362", "impactScore": null, "integrityImpact": "Partial", "obtainAllPrivilege": null, "obtainOtherPrivilege": null, "obtainUserPrivilege": null, "severity": "High", "trust": 0.8, "userInteractionRequired": null, "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P", "version": "2.0" }, { "accessComplexity": "LOW", "accessVector": "NETWORK", "authentication": "NONE", "author": "CNVD", "availabilityImpact": "NONE", "baseScore": 6.4, "confidentialityImpact": "PARTIAL", "exploitabilityScore": 10.0, "id": "CNVD-2016-13097", "impactScore": 4.9, "integrityImpact": "PARTIAL", "severity": "MEDIUM", "trust": 0.6, "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:N", "version": "2.0" }, { "accessComplexity": "LOW", "accessVector": "NETWORK", "authentication": "NONE", "author": "VULHUB", "availabilityImpact": "NONE", "baseScore": 6.4, "confidentialityImpact": "PARTIAL", "exploitabilityScore": 10.0, "id": "VHN-98182", "impactScore": 4.9, "integrityImpact": "PARTIAL", "severity": "MEDIUM", "trust": 0.1, "vectorString": "AV:N/AC:L/AU:N/C:P/I:P/A:N", "version": "2.0" }, { "acInsufInfo": null, "accessComplexity": "LOW", "accessVector": "NETWORK", "authentication": "NONE", "author": "VULMON", "availabilityImpact": "NONE", "baseScore": 6.4, "confidentialityImpact": "PARTIAL", "exploitabilityScore": 10.0, "id": "CVE-2016-9362", "impactScore": 4.9, "integrityImpact": "PARTIAL", "obtainAllPrivilege": null, "obtainOtherPrivilege": null, "obtainUserPrivilege": null, "severity": "MEDIUM", "trust": 0.1, "userInteractionRequired": null, "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:N", "version": "2.0" } ], "cvssV3": [ { "attackComplexity": "LOW", "attackVector": "NETWORK", "author": "NVD", "availabilityImpact": "NONE", "baseScore": 9.1, "baseSeverity": "CRITICAL", "confidentialityImpact": "HIGH", "exploitabilityScore": 3.9, "impactScore": 5.2, "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "UNCHANGED", "trust": 1.0, "userInteraction": "NONE", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N", "version": "3.0" }, { "attackComplexity": "Low", "attackVector": "Network", "author": "NVD", "availabilityImpact": "High", "baseScore": 9.8, "baseSeverity": "Critical", "confidentialityImpact": "High", "exploitabilityScore": null, "id": "CVE-2016-9362", "impactScore": null, "integrityImpact": "High", "privilegesRequired": "None", "scope": "Unchanged", "trust": 0.8, "userInteraction": "None", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "version": "3.0" } ], "severity": [ { "author": "NVD", "id": "CVE-2016-9362", "trust": 1.8, "value": "CRITICAL" }, { "author": "CNVD", "id": "CNVD-2016-13097", "trust": 0.6, "value": "MEDIUM" }, { "author": "CNNVD", "id": "CNNVD-201612-631", "trust": 0.6, "value": "MEDIUM" }, { "author": "VULHUB", "id": "VHN-98182", "trust": 0.1, "value": "MEDIUM" }, { "author": "VULMON", "id": "CVE-2016-9362", "trust": 0.1, "value": "MEDIUM" } ] } ], "sources": [ { "db": "CNVD", "id": "CNVD-2016-13097" }, { "db": "VULHUB", "id": "VHN-98182" }, { "db": "VULMON", "id": "CVE-2016-9362" }, { "db": "JVNDB", "id": "JVNDB-2016-007990" }, { "db": "NVD", "id": "CVE-2016-9362" }, { "db": "CNNVD", "id": "CNNVD-201612-631" } ] }, "description": { "@context": { "@vocab": "https://www.variotdbs.pl/ref/description#", "sources": { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#" } } }, "data": "An issue was discovered in WAGO 750-8202/PFC200 prior to FW04 (released August 2015), WAGO 750-881 prior to FW09 (released August 2016), and WAGO 0758-0874-0000-0111. By accessing a specific uniform resource locator (URL) on the web server, a malicious user is able to edit and to view settings without authenticating. WAGO 750-8202 / PFC200 and so on are all bus editable logic controller modules of German WAGO company. \n\nAn authentication bypass vulnerability exists in several WAGO products. An attacker could use this vulnerability to bypass the authentication mechanism and perform unauthorized operations. This may lead to further attacks. \nThe following products are vulnerable:\nWAGO 750-8202/PFC200 prior to FW04\nWAGO 750-881 prior to FW09\nWAGO 0758-0874-0000-0111. WAGO 750-8202/PFC200, etc", "sources": [ { "db": "NVD", "id": "CVE-2016-9362" }, { "db": "JVNDB", "id": "JVNDB-2016-007990" }, { "db": "CNVD", "id": "CNVD-2016-13097" }, { "db": "BID", "id": "95074" }, { "db": "VULHUB", "id": "VHN-98182" }, { "db": "VULMON", "id": "CVE-2016-9362" } ], "trust": 2.61 }, "external_ids": { "@context": { "@vocab": "https://www.variotdbs.pl/ref/external_ids#", "data": { "@container": "@list" }, "sources": { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#" } } }, "data": [ { "db": "NVD", "id": "CVE-2016-9362", "trust": 3.5 }, { "db": "ICS CERT", "id": "ICSA-16-357-02", "trust": 2.9 }, { "db": "BID", "id": "95074", "trust": 2.7 }, { "db": "JVNDB", "id": "JVNDB-2016-007990", "trust": 0.8 }, { "db": "CNNVD", "id": "CNNVD-201612-631", "trust": 0.7 }, { "db": "CNVD", "id": "CNVD-2016-13097", "trust": 0.6 }, { "db": "VULHUB", "id": "VHN-98182", "trust": 0.1 }, { "db": "VULMON", "id": "CVE-2016-9362", "trust": 0.1 } ], "sources": [ { "db": "CNVD", "id": "CNVD-2016-13097" }, { "db": "VULHUB", "id": "VHN-98182" }, { "db": "VULMON", "id": "CVE-2016-9362" }, { "db": "BID", "id": "95074" }, { "db": "JVNDB", "id": "JVNDB-2016-007990" }, { "db": "NVD", "id": "CVE-2016-9362" }, { "db": "CNNVD", "id": "CNNVD-201612-631" } ] }, "id": "VAR-201702-0861", "iot": { "@context": { "@vocab": "https://www.variotdbs.pl/ref/iot#", "sources": { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#" } } }, "data": true, "sources": [ { "db": "VULHUB", "id": "VHN-98182" } ], "trust": 0.9075367449999999 }, "last_update_date": "2023-12-18T13:53:05.311000Z", "patch": { "@context": { "@vocab": "https://www.variotdbs.pl/ref/patch#", "data": { "@container": "@list" }, "sources": { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#" } } }, "data": [ { "title": "Top Page", "trust": 0.8, "url": "http://global.wago.com/jp/" }, { "title": "Patch for Multiple WAGO Product Certification Bypass Vulnerabilities", "trust": 0.6, "url": "https://www.cnvd.org.cn/patchinfo/show/86762" }, { "title": "Multiple WAGO Product security vulnerabilities", "trust": 0.6, "url": "http://www.cnnvd.org.cn/web/xxk/bdxqbyid.tag?id=66653" } ], "sources": [ { "db": "CNVD", "id": "CNVD-2016-13097" }, { "db": "JVNDB", "id": "JVNDB-2016-007990" }, { "db": "CNNVD", "id": "CNNVD-201612-631" } ] }, "problemtype_data": { "@context": { "@vocab": "https://www.variotdbs.pl/ref/problemtype_data#", "sources": { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#" } } }, "data": [ { "problemtype": "CWE-287", "trust": 1.9 } ], "sources": [ { "db": "VULHUB", "id": "VHN-98182" }, { "db": "JVNDB", "id": "JVNDB-2016-007990" }, { "db": "NVD", "id": "CVE-2016-9362" } ] }, "references": { "@context": { "@vocab": "https://www.variotdbs.pl/ref/references#", "data": { "@container": "@list" }, "sources": { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#" } } }, "data": [ { "trust": 3.0, "url": "https://ics-cert.us-cert.gov/advisories/icsa-16-357-02" }, { "trust": 2.4, "url": "http://www.securityfocus.com/bid/95074" }, { "trust": 0.8, "url": "http://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2016-9362" }, { "trust": 0.8, "url": "https://nvd.nist.gov/vuln/detail/cve-2016-9362" }, { "trust": 0.3, "url": " http://www.wago.com/" }, { "trust": 0.1, "url": "https://cwe.mitre.org/data/definitions/287.html" }, { "trust": 0.1, "url": "https://tools.cisco.com/security/center/viewalert.x?alertid=52214" }, { "trust": 0.1, "url": "https://nvd.nist.gov" } ], "sources": [ { "db": "CNVD", "id": "CNVD-2016-13097" }, { "db": "VULHUB", "id": "VHN-98182" }, { "db": "VULMON", "id": "CVE-2016-9362" }, { "db": "BID", "id": "95074" }, { "db": "JVNDB", "id": "JVNDB-2016-007990" }, { "db": "NVD", "id": "CVE-2016-9362" }, { "db": "CNNVD", "id": "CNNVD-201612-631" } ] }, "sources": { "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#", "data": { "@container": "@list" } }, "data": [ { "db": "CNVD", "id": "CNVD-2016-13097" }, { "db": "VULHUB", "id": "VHN-98182" }, { "db": "VULMON", "id": "CVE-2016-9362" }, { "db": "BID", "id": "95074" }, { "db": "JVNDB", "id": "JVNDB-2016-007990" }, { "db": "NVD", "id": "CVE-2016-9362" }, { "db": "CNNVD", "id": "CNNVD-201612-631" } ] }, "sources_release_date": { "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources_release_date#", "data": { "@container": "@list" } }, "data": [ { "date": "2016-12-27T00:00:00", "db": "CNVD", "id": "CNVD-2016-13097" }, { "date": "2017-02-13T00:00:00", "db": "VULHUB", "id": "VHN-98182" }, { "date": "2017-02-13T00:00:00", "db": "VULMON", "id": "CVE-2016-9362" }, { "date": "2016-12-22T00:00:00", "db": "BID", "id": "95074" }, { "date": "2017-04-05T00:00:00", "db": "JVNDB", "id": "JVNDB-2016-007990" }, { "date": "2017-02-13T21:59:02.110000", "db": "NVD", "id": "CVE-2016-9362" }, { "date": "2016-12-23T00:00:00", "db": "CNNVD", "id": "CNNVD-201612-631" } ] }, "sources_update_date": { "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources_update_date#", "data": { "@container": "@list" } }, "data": [ { "date": "2016-12-27T00:00:00", "db": "CNVD", "id": "CNVD-2016-13097" }, { "date": "2017-06-28T00:00:00", "db": "VULHUB", "id": "VHN-98182" }, { "date": "2017-06-28T00:00:00", "db": "VULMON", "id": "CVE-2016-9362" }, { "date": "2017-01-12T08:04:00", "db": "BID", "id": "95074" }, { "date": "2017-04-05T00:00:00", "db": "JVNDB", "id": "JVNDB-2016-007990" }, { "date": "2017-06-28T14:08:53.263000", "db": "NVD", "id": "CVE-2016-9362" }, { "date": "2016-12-23T00:00:00", "db": "CNNVD", "id": "CNNVD-201612-631" } ] }, "threat_type": { "@context": { "@vocab": "https://www.variotdbs.pl/ref/threat_type#", "sources": { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#" } } }, "data": "remote", "sources": [ { "db": "CNNVD", "id": "CNNVD-201612-631" } ], "trust": 0.6 }, "title": { "@context": { "@vocab": "https://www.variotdbs.pl/ref/title#", "sources": { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#" } } }, "data": "plural WAGO Vulnerability of editing settings without authentication in the product", "sources": [ { "db": "JVNDB", "id": "JVNDB-2016-007990" } ], "trust": 0.8 }, "type": { "@context": { "@vocab": "https://www.variotdbs.pl/ref/type#", "sources": { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#" } } }, "data": "authorization issue", "sources": [ { "db": "CNNVD", "id": "CNNVD-201612-631" } ], "trust": 0.6 } }
Sightings
Author | Source | Type | Date |
---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or seen somewhere by the user.
- Confirmed: The vulnerability is confirmed from an analyst perspective.
- Exploited: This vulnerability was exploited and seen by the user reporting the sighting.
- Patched: This vulnerability was successfully patched by the user reporting the sighting.
- Not exploited: This vulnerability was not exploited or seen by the user reporting the sighting.
- Not confirmed: The user expresses doubt about the veracity of the vulnerability.
- Not patched: This vulnerability was not successfully patched by the user reporting the sighting.