WAGO Industrial Managed Switches Credential Exposure Vulnerability via Authentication Bypass

A vulnerability exists in WAGO Industrial Managed Switch models 0852-1322 and 0852-1328, both running firmware through 2.64. User credentials are encrypted using AES-ECB with a hardcoded key, and an unauthenticated remote attacker who accesses the configuration file can decrypt and retrieve plaintext usernames and passwords. This vulnerability is particularly concerning when combined with an authentication bypass that has also been identified on these devices.

Impact

Exploitation of this vulnerability allows for the decryption of stored user credentials, including administrative usernames and passwords, which can then be used to gain unauthorized access to the device's management interface.

Remediation

Users are advised to update their devices to firmware version 02.65.