The Linux Console on the WAGO I/O System 758 model 758-870, 758-874, 758-875, and 758-876 Industrial PC (IPC) devices has a default password of wago for the (1) root and (2) admin accounts, (3) a default password of user for the user account, and (4) a default password of guest for the guest account, which makes it easier for remote attackers to obtain login access via a TELNET session, a different vulnerability than CVE-2012-3013.
References
Link | Resource |
---|---|
http://www.us-cert.gov/control_systems/pdf/ICSA-12-249-02.pdf | US Government Resource |
http://www.wago.com/wagoweb/documentation/app_note/a1176/a117600e.pdf | Vendor Advisory |
http://www.us-cert.gov/control_systems/pdf/ICSA-12-249-02.pdf | US Government Resource |
http://www.wago.com/wagoweb/documentation/app_note/a1176/a117600e.pdf | Vendor Advisory |
Configurations
Configuration 1 (hide)
|
History
21 Nov 2024, 01:43
Type | Values Removed | Values Added |
---|---|---|
References | () http://www.us-cert.gov/control_systems/pdf/ICSA-12-249-02.pdf - US Government Resource | |
References | () http://www.wago.com/wagoweb/documentation/app_note/a1176/a117600e.pdf - Vendor Advisory |
Information
Published : 2012-09-07 00:55
Updated : 2024-11-21 01:43
NVD link : CVE-2012-4879
Mitre link : CVE-2012-4879
CVE.ORG link : CVE-2012-4879
JSON object : View
Products Affected
wago
- wago_i\/o_system_758_industrial_pc_device
CWE
CWE-255
Credentials Management Errors