What’s Vulnerable › Vulnerabilities

CVE-2019-10712

• Severity: critical (CVSS 9.8 v3.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 2.8% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2019-05-07 · updated 2026-06-17
• Weakness: CWE-798

Description

The Web-GUI on WAGO Series 750-88x (750-330, 750-352, 750-829, 750-831, 750-852, 750-880, 750-881, 750-882, 750-884, 750-885, 750-889) and Series 750-87x (750-830, 750-849, 750-871, 750-872, 750-873) devices has undocumented service access.

Affected products

• WAGO 750-330 Firmware: before 14 — fixed in 14
• WAGO 750-352 Firmware: before 14 — fixed in 14
• WAGO 750-829 Firmware: before 14 — fixed in 14
• WAGO 750-830 Firmware: before 06 — fixed in 06
• WAGO 750-831 Firmware: before 14 — fixed in 14
• WAGO 750-849 Firmware: before 08 — fixed in 08
• WAGO 750-852 Firmware: before 14 — fixed in 14
• WAGO 750-871 Firmware: before 11 — fixed in 11
• WAGO 750-872 Firmware: before 07 — fixed in 07
• WAGO 750-873 Firmware: before 07 — fixed in 07
• WAGO 750-880 Firmware: before 14 — fixed in 14
• WAGO 750-881 Firmware: before 14 — fixed in 14
• WAGO 750-882 Firmware: before 14 — fixed in 14
• WAGO 750-884 Firmware: before 14 — fixed in 14
• WAGO 750-885 Firmware: before 14 — fixed in 14
• WAGO 750-889 Firmware: before 14 — fixed in 14

How to fix

Upgrade to a fixed version: WAGO 750-330 Firmware 14; WAGO 750-352 Firmware 14; WAGO 750-829 Firmware 14; WAGO 750-830 Firmware 06; WAGO 750-831 Firmware 14; WAGO 750-849 Firmware 08; WAGO 750-852 Firmware 14; WAGO 750-871 Firmware 11; WAGO 750-872 Firmware 07; WAGO 750-873 Firmware 07; WAGO 750-880 Firmware 14; WAGO 750-881 Firmware 14. Check the vendor advisory for mitigations.

References

• http://www.securityfocus.com/bid/108482
• https://cert.vde.com/de-de/advisories/vde-2019-008
• https://lists.apache.org/thread.html/r0066c1e862613de402fee04e81cbe00bcd64b64a2711beb9a13c3b25%40%3Ccommits.cassandra.apache.org%3E
• https://lists.apache.org/thread.html/r25e25973e9577c62fd0221b4b52990851adf11cbe33036bd67d4b13d%40%3Ccommits.cassandra.apache.org%3E
• https://lists.apache.org/thread.html/r37eb6579fa0bf94a72b6c978e2fee96f68a2b1b3ac1b1ce60aee86cf%40%3Ccommits.cassandra.apache.org%3E
• https://lists.apache.org/thread.html/r386966780034aadee69ffd82d44555117c9339545b9ce990fe490a3e%40%3Ccommits.cassandra.apache.org%3E
• https://lists.apache.org/thread.html/r80e8882c86c9c17a57396a5ef7c4f08878d629a0291243411be0de3a%40%3Ccommits.cassandra.apache.org%3E
• https://lists.apache.org/thread.html/ra37700b842790883b9082e6b281fb7596f571b13078a4856cd38f2c2%40%3Ccommits.cassandra.apache.org%3E
• https://lists.apache.org/thread.html/rb47911c179c9f3e8ea3f134b5645e63cd20c6fc63bd0b43ab5864bd1%40%3Ccommits.cassandra.apache.org%3E
• http://www.securityfocus.com/bid/108482
• https://cert.vde.com/de-de/advisories/vde-2019-008
• https://lists.apache.org/thread.html/r0066c1e862613de402fee04e81cbe00bcd64b64a2711beb9a13c3b25%40%3Ccommits.cassandra.apache.org%3E

Get alerted when CVE-2019-10712 or the next vulnerability affects your stack