Summary
An unknown and undocumented configuration interface with limited functionality was identified on the affected devices.
Impact
An unprivileged attacker can configure network setting to violate confidentiality of transferred packages if the network packages themselves are not protected by cryptographic measures. Additionally, the attacker can violate the availability of network clients by changing network settings (e.g., deactivate network ports).
Affected Product(s)
| Model no. | Product name | Affected versions |
|---|---|---|
| 852-111/000-001 | Unmanaged Switch | Firmware 01 |
Vulnerabilities
Expand / Collapse allIn WAGO Unmanaged Switch (852-111/000-001) in firmware version 01 an undocumented configuration interface without authorization allows an remote attacker to read system information and configure a limited set of parameters.
Mitigation
Restrict network access to the device.
Do not directly connect the device to the internet
Remediation
A firmware update which fixes the problem is available. Users who want to do a firmware update should contact the WAGO support.
Revision History
| Version | Date | Summary |
|---|---|---|
| 1 | 02/16/2023 14:43 | Initial revision. |