CVE-2016-9362
CriticalSummary
An issue was discovered in WAGO 750-8202/PFC200 prior to FW04, WAGO 750-881 prior to FW09, and WAGO 0758-0874-0000-0111 that allows a malicious user to edit and view settings without authentication by accessing a specific URL on the web server.
Risk Assessment
The lack of authentication poses a serious risk to the integrity and confidentiality of data in WAGO systems, potentially leading to unauthorized configuration changes.
Recommendation
It is recommended to update the software to the latest version to mitigate this vulnerability and implement additional security measures, such as restricting access to the web server.
Original NVD description (English source)
An issue was discovered in WAGO 750-8202/PFC200 prior to FW04 (released August 2015), WAGO 750-881 prior to FW09 (released August 2016), and WAGO 0758-0874-0000-0111. By accessing a specific uniform resource locator (URL) on the web server, a malicious user is able to edit and to view settings without authenticating.