Wago 750-849 Firmware vulnerabilities

3 CVEs affecting Wago 750-849 Firmware, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2019-10712, published 2019-05-07.

More from Wago.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2015-6473, published 2017-08-22. Critical severity, CVSS 9.8. EPSS: 3.5% chance of exploitation in the next 30 days. WAGO IO 750-849 01.01.27 and WAGO IO 750-881 01.02.05 do not contain privilege separation.
• CVE-2015-6472, published 2017-08-22. Critical severity, CVSS 9.8. EPSS: 2.9% chance of exploitation in the next 30 days. WAGO IO 750-849 01.01.27 and 01.02.05, WAGO IO 750-881, and WAGO IO 758-870 have weak credential management.
• CVE-2019-10712, published 2019-05-07. Critical severity, CVSS 9.8. EPSS: 2.8% chance of exploitation in the next 30 days. The Web-GUI on WAGO Series 750-88x (750-330, 750-352, 750-829, 750-831, 750-852, 750-880, 750-881, 750-882, 750-884, 750-885, 750-889) and Series 750-87x (750-830, 750-849, 750-871, 750-872, 750-873)…