CVE-2012-3013
critical
CVSS v3
—
CVSS v2
10.0
VIR risk
10.0
Description
WAGO I/O System 758 model 758-870, 758-874, 758-875, and 758-876 Industrial PC (IPC) devices have default passwords for unspecified Web Based Management accounts, which makes it easier for remote attackers to obtain administrative access via a TCP session.
Predictions
Exploit likelihood
20%
Patch ETA
—
Heuristic predictions, AS-IS, for prioritization only.
Mitigations
Vendor advisory: ics-cert@hq.dhs.gov — http://www.wago.com/wagoweb/documentation/app_note/a1176/a117600e.pdf
References
CWEs
CWE-255
Verify integrity in audit chain (admin only). AS-IS.