| Article No° | Product Name | Affected Version(s) |
|---|---|---|
| 852-111/000-001 | Unmanaged Switch | = 01 |
An unknown and undocumented configuration interface with limited functionality was identified on the affected devices.
In WAGO Unmanaged Switch (852-111/000-001) in firmware version 01 an undocumented configuration interface without authorization allows an remote attacker to read system information and configure a limited set of parameters.
An unprivileged attacker can configure network setting to violate confidentiality of transferred packages if the network packages themselves are not protected by cryptographic measures. Additionally, the attacker can violate the availability of network clients by changing network settings (e.g., deactivate network ports).
Mitigation
Remediation
A firmware update which fixes the problem is available. Users who want to do a firmware update should contact the WAGO support.
Coordination done by CERT@VDE.