Wago 852-303 Firmware vulnerabilities

2 CVEs affecting Wago 852-303 Firmware, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2019-12550, published 2019-06-17.

More from Wago.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2019-12549, published 2019-06-17. Critical severity, CVSS 9.8. EPSS: 3.3% chance of exploitation in the next 30 days. WAGO 852-303 before FW06, 852-1305 before FW06, and 852-1505 before FW03 devices contain hardcoded private keys for the SSH daemon. The fingerprint of the SSH host key from the corresponding SSH…
• CVE-2019-12550, published 2019-06-17. Critical severity, CVSS 9.8. EPSS: 2.7% chance of exploitation in the next 30 days. WAGO 852-303 before FW06, 852-1305 before FW06, and 852-1505 before FW03 devices contain hardcoded users and passwords that can be used to login via SSH and TELNET.