Wago web based management vulnerability

I was searching google for wago web based management to see what you can do with the wagos. To my surprise, the second, third, fourth and fifth results appear to be actual wago PLCs, and the sixth result is an ics-cert vulnerability notice that the user account authentication can be bypassed.

Don't open up inbound ports to any of your PLCs through your firewall people!

Wago has been up late nights fixing these security issues. The vast majority of them have been closed. I checked with my Wago guy. And he said the final security fixes will be out at the end of the month.