Lucene search

[email protected]NVD:CVE-2019-12549

HistoryJun 17, 2019 - 5:15 p.m.

CVE-2019-12549

2019-06-1717:15:11

CWE-798

[email protected]

web.nvd.nist.gov

10 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

9.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

9.7 High

AI Score

Confidence

High

0.004 Low

EPSS

Percentile

74.9%

JSON

WAGO 852-303 before FW06, 852-1305 before FW06, and 852-1505 before FW03 devices contain hardcoded private keys for the SSH daemon. The fingerprint of the SSH host key from the corresponding SSH daemon matches the embedded private key.

Affected configurations

NVD

Node

wago852-303Match-

AND

wago852-303_firmwareRange<1.2.2.s0

Node

wago852-1305Match-

AND

wago852-1305_firmwareRange<1.1.6.s0

Node

wago852-1505Match-

AND

wago852-1505_firmwareRange<1.1.5.s0

References

cert.vde.com/en-us/advisories/vde-2019-013

ics-cert.us-cert.gov/advisories/ICSA-19-164-02

www.wago.com/us/

10 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

9.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

9.7 High

AI Score

Confidence

High

0.004 Low

EPSS

Percentile

74.9%

JSON

Related for NVD:CVE-2019-12549

cve1 prion1 cvelist1 ics1 packetstorm1