Wago Fieldbus Coupler Ethernet 3rd Generation vulnerabilities

2 CVEs affecting Wago Fieldbus Coupler Ethernet 3rd Generation, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2018-25090, published 2024-03-13.

More from Wago.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2015-10123, published 2024-03-13. High severity, CVSS 8.8. EPSS: 0.6% chance of exploitation in the next 30 days. An unautheticated remote attacker could send specifically crafted packets to a affected device. If an authenticated user then views that data in a specific page of the web-based management a buffer…
• CVE-2018-25090, published 2024-03-13. Medium severity, CVSS 5.4. EPSS: 0.4% chance of exploitation in the next 30 days. An unauthenticated remote attacker can use an XSS attack due to improper neutralization of input during web page generation. User interaction is required. This leads to a limited impact of…