CVE-2012-4879

The Linux Console on the WAGO I/O System 758 model 758-870, 758-874, 758-875, and 758-876 Industrial PC (IPC) devices has a default password of wago for the (1) root and (2) admin accounts, (3) a default password of user for the user account, and (4) a default password of guest for the guest account, which makes it easier for remote attackers to obtain login access via a TELNET session, a different vulnerability than CVE-2012-3013.

• CWE-255

• http://www.us-cert.gov/control_systems/pdf/ICSA-12-249-02.pdfUS Government Resource
• http://www.wago.com/wagoweb/documentation/app_note/a1176/a117600e.pdfVendor Advisory
• http://www.us-cert.gov/control_systems/pdf/ICSA-12-249-02.pdfUS Government Resource
• http://www.wago.com/wagoweb/documentation/app_note/a1176/a117600e.pdfVendor Advisory

Published

Sep 7, 2012

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2012-4873Cross-site scripting (XSS) vulnerability in the file_downloa…
• CVE-2012-4874Unspecified vulnerability in the Another WordPress Classifie…
• CVE-2012-4875Heap-based buffer overflow in gdevwpr2.c in Ghostscript 9.04…
• CVE-2012-4876Stack-based buffer overflow in the UltraMJCam ActiveX Contro…
• CVE-2012-4877Cross-site request forgery (CSRF) vulnerability in controlce…
• CVE-2012-4878Absolute path traversal vulnerability in controlcenter.php i…
• CVE-2012-4880Multiple untrusted search path vulnerabilities in DVD Archit…
• CVE-2012-4881Untrusted search path vulnerability in moviEZ HD 1.0 Build 2…
• CVE-2012-4882Multiple untrusted search path vulnerabilities in 3D XML Pla…
• CVE-2012-4883Multiple untrusted search path vulnerabilities in 3DVIA Comp…
• CVE-2012-4884Argument injection vulnerability in Request Tracker (RT) 3.8…
• CVE-2012-4885The wikitext parser in MediaWiki 1.17.x before 1.17.3 and 1.…