CVE-2019-12550

9.8 criticalEPSS 2.7%

Critical (9.8) in wago. EPSS 2.7% chance of exploitation in the next 30 days.

WAGO 852-303 before FW06, 852-1305 before FW06, and 852-1505 before FW03 devices contain hardcoded users and passwords that can be used to login via SSH and TELNET.

Severity

CVSS 3.0

9.8 critical

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS: 2.7% chance of exploitation in the next 30 days; higher than 85% of CVEs (scores of 2026-10-31)
CWE: CWE-798
Published: 2019-06-17
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

wago:852-1305_firmware
wago:852-1505_firmware
wago:852-303_firmware

References

https://cert.vde.com/en-us/advisories/vde-2019-013
https://ics-cert.us-cert.gov/advisories/ICSA-19-164-02
https://www.wago.com/us/
https://cert.vde.com/en-us/advisories/vde-2019-013
https://ics-cert.us-cert.gov/advisories/ICSA-19-164-02

Check your stack JSON