Skip to content
CVE PROGRAM SOURCE RECORD2.7 Low

CVE-2023-4089

WAGO: Multiple products vulnerable to local file inclusion

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
CERTVDE

Description

On affected Wago products an remote attacker with administrative privileges can access files to which he has already access to through an undocumented local file inclusion. This access is logged in a different log file than expected.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

WAGO Compact Controller CC100

Default version status: unaffected

  • FW19 to ≤ FW26affected

WAGO Edge Controller

Default version status: unaffected

  • FW18 to ≤ FW26affected

WAGO PFC100

Default version status: unaffected

  • FW16 to ≤ FW26affected

WAGO PFC200

Default version status: unaffected

  • FW16 to ≤ FW26affected

WAGO Touch Panel 600 Advanced Line

Default version status: unaffected

  • FW16 to ≤ FW26affected

WAGO Touch Panel 600 Marine Line

Default version status: unaffected

  • FW16 to ≤ FW26affected

WAGO Touch Panel 600 Standard Line

Default version status: unaffected

  • FW16 to ≤ FW26affected

References