peter bassill · operator
$ cve CVE-2019-10712 JSON

CVE-2019-10712

9.8
CRITICAL · CVSS 3.0 · EPSS 2.8% (pctl 86)

In your normal cycle

Critical by CVSS (9.8), but no sign of active exploitation.

Description

The Web-GUI on WAGO Series 750-88x (750-330, 750-352, 750-829, 750-831, 750-852, 750-880, 750-881, 750-882, 750-884, 750-885, 750-889) and Series 750-87x (750-830, 750-849, 750-871, 750-872, 750-873) devices has undocumented service access.

Scoring

CVSS9.8 (CRITICAL, v3.0)
VectorCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
EPSS2.76% — more likely to be exploited than 86% of all CVEs
WeaknessCWE-798
On CISA KEVno
Public exploitnone known
Published2019-05-07
Last modified2026-06-17

Affected (32)

VendorProduct
wago750-330
wago750-330 firmware
wago750-352
wago750-352 firmware
wago750-829
wago750-829 firmware
wago750-830
wago750-830 firmware
wago750-831
wago750-831 firmware
wago750-849
wago750-849 firmware
wago750-852
wago750-852 firmware
wago750-871
wago750-871 firmware
wago750-872
wago750-872 firmware
wago750-873
wago750-873 firmware
wago750-880
wago750-880 firmware
wago750-881
wago750-881 firmware
wago750-882
wago750-882 firmware
wago750-884
wago750-884 firmware
wago750-885
wago750-885 firmware
wago750-889
wago750-889 firmware

References

→ the Explorer  ·  watch your stack  ·  NVD