CVE-2018-12981: Wago 762-3000 Firmware vulnerability
Wago · 762-3000 Firmware
Affected: Wago 762-3000 Firmware · Exploitation: possible (1 to 10%)
Not in CyberSIXT coverage yet: no article names this CVE. This page shows the public record.
Higher than 92% of scored CVEs
Not scored yet. The CVE record carries no CVSS score.
DescriptionCVE.org
An issue was discovered on WAGO e!DISPLAY 762-3000 through 762-3003 devices with firmware before FW 02. The vulnerability can be exploited by authenticated and unauthenticated users by sending special crafted requests to the web server allowing injecting code within the WBM. The code will be rendered and/or executed in the browser of the user's browser.
On the Atlas
Every published CVE is on the CyberSIXT Atlas, grouped by weakness, vendor and month.
- Exploitation
- Possible (1 to 10%). EPSS between 1% and 10%.
- CISA KEV
- Not listed
- Public check
- No public nuclei template
- Weakness
- Cross-site Scripting
- Vendor
- Wago
- Published
- July 2018
CoverageNo articles yet
No CyberSIXT article names CVE-2018-12981 yet, so there is no coverage timeline, action brief or change log for it. Everything on this page comes from the public CVE record, CISA KEV, EPSS and the nuclei template index. Search the archive or see the CVEs in the news.
References
- NVD entrynvd.nist.gov
- CVE recordcve.org
- Weakness CWE-79cwe.mitre.org
- cert.vde.com/en-us/advisories/vde-2018-010cert.vde.com
- sec-consult.com/en/blog/advisories/remote-code-execution-via-mulsec-consult.com
- ics-cert.us-cert.gov/advisories/ICSA-18-198-02ics-cert.us-cert.gov
- wago.com/medias/SA-WBM-2018-004.pdf?context=bWFzdGVyfHJvb3R8Mjgywago.com
- Exploitexploit-db.com
- Mailing listseclists.org