VULNERABILITY INTELLIGENCE
CVE-2019-12549
CVSS score9.8 CRITICAL
EPSS probability3.26%
CISA KEVNot currently listed
Published2019-06-17
Last modified2026-06-17
CVSS vectorCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Description
WAGO 852-303 before FW06, 852-1305 before FW06, and 852-1505 before FW03 devices contain hardcoded private keys for the SSH daemon. The fingerprint of the SSH host key from the corresponding SSH daemon matches the embedded private key.
Weakness classification
- nvd@nist.gov: CWE-798
Primary references
- cve@mitre.org — Third Party Advisory
- cve@mitre.org — Third Party Advisory, US Government Resource
- cve@mitre.org — Vendor Advisory
- af854a3a-2127-422b-91ae-364da2661108 — Third Party Advisory
- af854a3a-2127-422b-91ae-364da2661108 — Third Party Advisory, US Government Resource
- af854a3a-2127-422b-91ae-364da2661108 — Vendor Advisory