TI-2012-04123 Aliases CVE-2012-4879 GHSA-3qxc-pvf2-2rr2

The Linux Console on the WAGO I/O System 758 model 758-870, 758-874, 758-875, and 758-876…

MEDIUM 49CWE-255Published 2012-09-07 · Updated 2024-09-16

Key facts

Attack vector: Network
Privileges required: None
User interaction: — Not recorded in CVSS 2.0
Attack complexity: Low
Impact type: —
Confidentiality · integrity · availability: Complete · Complete · Complete
Fix status: No fix listed

Attack profile from CVSS 2.0 · NVD. Fix status from CNA.

Summary

The Linux Console on the WAGO I/O System 758 model 758-870, 758-874, 758-875, and 758-876 Industrial PC (IPC) devices has a default password of wago for the (1) root and (2) admin accounts, (3) a default password of user for the user account, and (4) a default password of guest for the guest account, which makes it easier for remote attackers to obtain login access via a TELNET session, a different vulnerability than CVE-2012-3013.

Why it matters now

EPSS 0.03153 88th percentileScored 2026-11-07

Fix No fix listed No fixed version in the sources yet

SSVC decision points

Not available: CISA has not published SSVC decision points for this record.

Affected products

Vendor	Product	Affected versions	Fixed in	Status	Source
—	—	all versions	—	No fix listed	CNA

— Vendor— Affected all versions Fixed in — No fix listed CNA

CPE configurations NVD · 4

CPE	Versions	Role	Vendor
cpe:2.3:h:wago:wago_i\/o_system_758_industrial_pc_device:758-870:::::::*	758-870	Vulnerable	WAGO
cpe:2.3:h:wago:wago_i\/o_system_758_industrial_pc_device:758-874:::::::*	758-874	Vulnerable	WAGO
cpe:2.3:h:wago:wago_i\/o_system_758_industrial_pc_device:758-875:::::::*	758-875	Vulnerable	WAGO
cpe:2.3:h:wago:wago_i\/o_system_758_industrial_pc_device:758-876:::::::*	758-876	Vulnerable	WAGO

cpe:2.3:h:wago:wago_i\/o_system_758_industrial_pc_device:758-870:*:*:*:*:*:*:* Versions 758-870 Vulnerable ·WAGO
cpe:2.3:h:wago:wago_i\/o_system_758_industrial_pc_device:758-874:*:*:*:*:*:*:* Versions 758-874 Vulnerable ·WAGO
cpe:2.3:h:wago:wago_i\/o_system_758_industrial_pc_device:758-875:*:*:*:*:*:*:* Versions 758-875 Vulnerable ·WAGO
cpe:2.3:h:wago:wago_i\/o_system_758_industrial_pc_device:758-876:*:*:*:*:*:*:* Versions 758-876 Vulnerable ·WAGO

Remediation

No fixed version listed by the sources yet.

Timeline

2026-10-02 Threatist record created from CVE-2012-4879
2026-10-03 Alias added: GHSA-3qxc-pvf2-2rr2

References

Advisory 1

http://www.wago.com/wagoweb/documentation/app_note/a1176/a117600e.pdf

Other 1

http://www.us-cert.gov/control_systems/pdf/ICSA-12-249-02.pdf

TI-2012-02616 WAGO I/O System 758 model 758-870, 758-874, 758-875, and 758-876 Industrial PC (IPC)… CVSS 2.0HIGH 10.0

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences