medium6.1
CVE-2018-16210
WAGO 750-88X and WAGO 750-89X Ethernet Controller devices, versions 01.09.18(13) and before, have XSS in the SNMP configuration via the webserv/cplcfg/snmp.ssi…
Impact
WAGO 750-88X and WAGO 750-89X Ethernet Controller devices, versions 01.09.18(13) and before, have XSS in the SNMP configuration via the webserv/cplcfg/snmp.ssi SNMP_DESC or SNMP_LOC_SNMP_CONT field.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Wago | 750-362 Firmware | before 05 |
| Wago | 750-363 Firmware | before 05 |
| Wago | 750-823 Firmware | before 05 |
| Wago | 750-832 Firmware | before 05 |
| Wago | 750-862 Firmware | before 05 |
| Wago | 750-891 Firmware | before 05 |
| Wago | 750-890 Firmware | before 05 |
| Wago | 750-352 Firmware | before 14 |
| Wago | 750-831 Firmware | before 14 |
| Wago | 750-852 Firmware | before 14 |
| Wago | 750-880 Firmware | before 14 |
| Wago | 750-881 Firmware | before 14 |