The Web-GUI on WAGO Series 750-88x (750-330, 750-352, 750-829, 750-831, 750-852, 750-880…
Priority MEDIUM 47CWE-798Published · Updated
Key facts
- Attack vector
- Network
- Privileges required
- None
- User interaction
- None
- Attack complexity
- Low
- Impact type
- Security bypass
- Confidentiality · integrity · availability
- High · High · High
- Fix status
- No fix listed
Attack profile from CVSS 3.0 · NVD. Fix status from CNA. Impact type from CWE-798.
Summary
The Web-GUI on WAGO Series 750-88x (750-330, 750-352, 750-829, 750-831, 750-852, 750-880, 750-881, 750-882, 750-884, 750-885, 750-889) and Series 750-87x (750-830, 750-849, 750-871, 750-872, 750-873) devices has undocumented service access.
Why it matters now
EPSS 0.02763 86th percentileScored 2026-11-07
Fix No fix listed No fixed version in the sources yet
SSVC decision points
Not available: CISA has not published SSVC decision points for this record.
Affected products
| Vendor | Product | Affected versions | Fixed in | Status | Source |
|---|---|---|---|---|---|
| — | — | all versions | — | No fix listed | CNA |
- — Vendor— Affected all versions Fixed in — No fix listed CNA
CPE configurations NVD · 32
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:o:wago:750-830_firmware:*:*:*:*:*:*:*:* | before 06 | Vulnerable | WAGO |
| cpe:2.3:h:wago:750-830:-:*:*:*:*:*:*:* | not specified by NVD | Running on | WAGO |
| cpe:2.3:o:wago:750-849_firmware:*:*:*:*:*:*:*:* | before 08 | Vulnerable | WAGO |
| cpe:2.3:h:wago:750-849:-:*:*:*:*:*:*:* | not specified by NVD | Running on | WAGO |
| cpe:2.3:o:wago:750-871_firmware:*:*:*:*:*:*:*:* | before 11 | Vulnerable | WAGO |
| cpe:2.3:h:wago:750-871:-:*:*:*:*:*:*:* | not specified by NVD | Running on | WAGO |
| cpe:2.3:o:wago:750-872_firmware:*:*:*:*:*:*:*:* | before 07 | Vulnerable | WAGO |
| cpe:2.3:h:wago:750-872:-:*:*:*:*:*:*:* | not specified by NVD | Running on | WAGO |
| cpe:2.3:o:wago:750-873_firmware:*:*:*:*:*:*:*:* | before 07 | Vulnerable | WAGO |
| cpe:2.3:h:wago:750-873:-:*:*:*:*:*:*:* | not specified by NVD | Running on | WAGO |
- cpe:2.3:o:wago:750-830_firmware:*:*:*:*:*:*:*:* Versions before 06 Vulnerable ·WAGO
- cpe:2.3:h:wago:750-830:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·WAGO
- cpe:2.3:o:wago:750-849_firmware:*:*:*:*:*:*:*:* Versions before 08 Vulnerable ·WAGO
- cpe:2.3:h:wago:750-849:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·WAGO
- cpe:2.3:o:wago:750-871_firmware:*:*:*:*:*:*:*:* Versions before 11 Vulnerable ·WAGO
- cpe:2.3:h:wago:750-871:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·WAGO
- cpe:2.3:o:wago:750-872_firmware:*:*:*:*:*:*:*:* Versions before 07 Vulnerable ·WAGO
- cpe:2.3:h:wago:750-872:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·WAGO
- cpe:2.3:o:wago:750-873_firmware:*:*:*:*:*:*:*:* Versions before 07 Vulnerable ·WAGO
- cpe:2.3:h:wago:750-873:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·WAGO
Show 22 more CPE
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:o:wago:750-330_firmware:*:*:*:*:*:*:*:* | before 14 | Vulnerable | WAGO |
| cpe:2.3:h:wago:750-330:-:*:*:*:*:*:*:* | not specified by NVD | Running on | WAGO |
| cpe:2.3:o:wago:750-352_firmware:*:*:*:*:*:*:*:* | before 14 | Vulnerable | WAGO |
| cpe:2.3:h:wago:750-352:-:*:*:*:*:*:*:* | not specified by NVD | Running on | WAGO |
| cpe:2.3:o:wago:750-829_firmware:*:*:*:*:*:*:*:* | before 14 | Vulnerable | WAGO |
| cpe:2.3:h:wago:750-829:-:*:*:*:*:*:*:* | not specified by NVD | Running on | WAGO |
| cpe:2.3:o:wago:750-831_firmware:*:*:*:*:*:*:*:* | before 14 | Vulnerable | WAGO |
| cpe:2.3:h:wago:750-831:-:*:*:*:*:*:*:* | not specified by NVD | Running on | WAGO |
| cpe:2.3:o:wago:750-852_firmware:*:*:*:*:*:*:*:* | before 14 | Vulnerable | WAGO |
| cpe:2.3:h:wago:750-852:-:*:*:*:*:*:*:* | not specified by NVD | Running on | WAGO |
| cpe:2.3:o:wago:750-880_firmware:*:*:*:*:*:*:*:* | before 14 | Vulnerable | WAGO |
| cpe:2.3:h:wago:750-880:-:*:*:*:*:*:*:* | not specified by NVD | Running on | WAGO |
| cpe:2.3:o:wago:750-881_firmware:*:*:*:*:*:*:*:* | before 14 | Vulnerable | WAGO |
| cpe:2.3:h:wago:750-881:-:*:*:*:*:*:*:* | not specified by NVD | Running on | WAGO |
| cpe:2.3:o:wago:750-882_firmware:*:*:*:*:*:*:*:* | before 14 | Vulnerable | WAGO |
| cpe:2.3:h:wago:750-882:-:*:*:*:*:*:*:* | not specified by NVD | Running on | WAGO |
| cpe:2.3:o:wago:750-884_firmware:*:*:*:*:*:*:*:* | before 14 | Vulnerable | WAGO |
| cpe:2.3:h:wago:750-884:-:*:*:*:*:*:*:* | not specified by NVD | Running on | WAGO |
| cpe:2.3:o:wago:750-885_firmware:*:*:*:*:*:*:*:* | before 14 | Vulnerable | WAGO |
| cpe:2.3:h:wago:750-885:-:*:*:*:*:*:*:* | not specified by NVD | Running on | WAGO |
| cpe:2.3:o:wago:750-889_firmware:*:*:*:*:*:*:*:* | before 14 | Vulnerable | WAGO |
| cpe:2.3:h:wago:750-889:-:*:*:*:*:*:*:* | not specified by NVD | Running on | WAGO |
- cpe:2.3:o:wago:750-330_firmware:*:*:*:*:*:*:*:* Versions before 14 Vulnerable ·WAGO
- cpe:2.3:h:wago:750-330:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·WAGO
- cpe:2.3:o:wago:750-352_firmware:*:*:*:*:*:*:*:* Versions before 14 Vulnerable ·WAGO
- cpe:2.3:h:wago:750-352:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·WAGO
- cpe:2.3:o:wago:750-829_firmware:*:*:*:*:*:*:*:* Versions before 14 Vulnerable ·WAGO
- cpe:2.3:h:wago:750-829:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·WAGO
- cpe:2.3:o:wago:750-831_firmware:*:*:*:*:*:*:*:* Versions before 14 Vulnerable ·WAGO
- cpe:2.3:h:wago:750-831:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·WAGO
- cpe:2.3:o:wago:750-852_firmware:*:*:*:*:*:*:*:* Versions before 14 Vulnerable ·WAGO
- cpe:2.3:h:wago:750-852:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·WAGO
- cpe:2.3:o:wago:750-880_firmware:*:*:*:*:*:*:*:* Versions before 14 Vulnerable ·WAGO
- cpe:2.3:h:wago:750-880:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·WAGO
- cpe:2.3:o:wago:750-881_firmware:*:*:*:*:*:*:*:* Versions before 14 Vulnerable ·WAGO
- cpe:2.3:h:wago:750-881:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·WAGO
- cpe:2.3:o:wago:750-882_firmware:*:*:*:*:*:*:*:* Versions before 14 Vulnerable ·WAGO
- cpe:2.3:h:wago:750-882:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·WAGO
- cpe:2.3:o:wago:750-884_firmware:*:*:*:*:*:*:*:* Versions before 14 Vulnerable ·WAGO
- cpe:2.3:h:wago:750-884:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·WAGO
- cpe:2.3:o:wago:750-885_firmware:*:*:*:*:*:*:*:* Versions before 14 Vulnerable ·WAGO
- cpe:2.3:h:wago:750-885:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·WAGO
- cpe:2.3:o:wago:750-889_firmware:*:*:*:*:*:*:*:* Versions before 14 Vulnerable ·WAGO
- cpe:2.3:h:wago:750-889:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·WAGO
Remediation
No fixed version listed by the sources yet.
Timeline
- 2026-10-02 Threatist record created from CVE-2019-10712
- 2026-10-03 Alias added: GHSA-r6gg-5rm9-xp64
References
Other 7
- [cassandra-commits] 20200407 [jira] [Created] (CASSANDRA-15701) Does Cassandra 3.11.3/3.11.5 is affected by CVE-2019-10712 or not ?
- [cassandra-commits] 20200413 [jira] [Commented] (CASSANDRA-15701) Does Cassandra 3.11.3/3.11.5 is affected by CVE-2019-10712 or not ?
- [cassandra-commits] 20200420 [jira] [Updated] (CASSANDRA-15701) Does Cassandra 3.11.3/3.11.5 is affected by CVE-2019-10712 or not ?
- [cassandra-commits] 20200420 [jira] [Commented] (CASSANDRA-15701) Does Cassandra 3.11.3/3.11.5 is affected by CVE-2019-10712 or not ?
- [cassandra-commits] 20200420 [jira] [Commented] (CASSANDRA-15701) Does Cassandra 3.11.3/3.11.5 is affected by CVE-2019-10712 or not ?
- [cassandra-commits] 20200901 [jira] [Commented] (CASSANDRA-15701) Does Cassandra 3.11.3/3.11.5 is affected by CVE-2019-10712 or not ?
- [cassandra-commits] 20200901 [jira] [Commented] (CASSANDRA-15701) Does Cassandra 3.11.3/3.11.5 is affected by CVE-2019-10712 or not ?
Sources
- CVE-2019-10712 · CVE Program
- CVE-2019-10712 · NVD
- FIRST EPSS
- GHSA-r6gg-5rm9-xp64 · GitHub Advisory Database · CC BY 4.0
This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences