CVE-2012-4879

Severity Score

10.0

*CVSS v2

Exploit Likelihood

*EPSS

Affected Versions

*CPE

Public Exploits

*Multiple Sources

Exploited in Wild

*KEV

Decision

*SSVC

Descriptions

The Linux Console on the WAGO I/O System 758 model 758-870, 758-874, 758-875, and 758-876 Industrial PC (IPC) devices has a default password of wago for the (1) root and (2) admin accounts, (3) a default password of user for the user account, and (4) a default password of guest for the guest account, which makes it easier for remote attackers to obtain login access via a TELNET session, a different vulnerability than CVE-2012-3013.

La Consola Linux en WAGO I/O System 758 modelo 758-870, 758-874, y 758-875 Industrial PC (IPC), tienen una contraseña por defecto de wago para las cuentas (1) root y (2) admin, (3) una contraseña por defecto de user para la cuenta de usuario, y (4)y una contraseña por defecto de guest para la cuenta de invitado, lo que hace más fácil a atacantes remotos obtener acceso a través de una sessión TELNET, una vulnerabilidad diferente de CVE-2012-3013.

*Credits: N/A

CVSS Scores

NISTv2 10.0

Attack Vector

Network

Attack Complexity

Low

Authentication

None

Confidentiality

Complete

Integrity

Complete

Availability

Complete

* Common Vulnerability Scoring System

SSVC

Decision:-

Exploitation

Automatable

Tech. Impact

* Organization's Worst-case Scenario

Timeline

2012-09-06 CVE Reserved
2012-09-07 CVE Published
2024-09-16 CVE Updated
2024-09-17 EPSS Updated
---------- Exploited in Wild
---------- KEV Due Date
---------- First Exploit

CWE

CWE-255: Credentials Management Errors

CAPEC

References (2)

URL	Tag	Source
http://www.us-cert.gov/control_systems/pdf/ICSA-12-249-02.pdf	Us Government Resource

URL	Date	SRC

URL	Date	SRC

URL	Date	SRC
http://www.wago.com/wagoweb/documentation/app_note/a1176/a117600e.pdf	2013-10-11

Affected Vendors, Products, and Versions

Vendor		Product				Version		Other		Status
Vendor	Product	Version	Other	Status	<-- -->	Vendor	Product	Version	Other	Status
Wago Search vendor "Wago"		Wago I\/o System 758 Industrial Pc Device Search vendor "Wago" for product "Wago I\/o System 758 Industrial Pc Device"				758-870 Search vendor "Wago" for product "Wago I\/o System 758 Industrial Pc Device" and version "758-870"		-		Affected
Wago Search vendor "Wago"		Wago I\/o System 758 Industrial Pc Device Search vendor "Wago" for product "Wago I\/o System 758 Industrial Pc Device"				758-874 Search vendor "Wago" for product "Wago I\/o System 758 Industrial Pc Device" and version "758-874"		-		Affected
Wago Search vendor "Wago"		Wago I\/o System 758 Industrial Pc Device Search vendor "Wago" for product "Wago I\/o System 758 Industrial Pc Device"				758-875 Search vendor "Wago" for product "Wago I\/o System 758 Industrial Pc Device" and version "758-875"		-		Affected
Wago Search vendor "Wago"		Wago I\/o System 758 Industrial Pc Device Search vendor "Wago" for product "Wago I\/o System 758 Industrial Pc Device"				758-876 Search vendor "Wago" for product "Wago I\/o System 758 Industrial Pc Device" and version "758-876"		-		Affected