Skip to content
CVE PROGRAM SOURCE RECORD4.3 Medium

CVE-2023-5872

Wago: Vulnerability in Smart Designer Web-Application

Description

In Wago Smart Designer in versions up to 2.33.1 a low privileged remote attacker may enumerate projects and usernames through iterative requests to an specific endpoint.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Wago Smart Designer

Default version status: unaffected

  • 0.0.0 to ≤ 2.33.1affected

References