Description
An authenticated remote attacker with high privileges can exploit the OpenVPN configuration via the web-based management interface of a WAGO PLC. If user-defined scripts are permitted, OpenVPN may allow the execution of arbitrary shell commands enabling the attacker to run arbitrary commands on the device.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
WAGO CC100 (0751-9x01)
Default version status: unaffected
0.0.0 to ≤ 4.5.10affected
WAGO PFC100 G1 (0750-810-xxxx-xxxx)
Default version status: unaffected
0.0.0 to ≤ 3.10.10affected
WAGO PFC100 G2 (0750-811x-xxxx-xxxx)
Default version status: unaffected
0.0.0 to ≤ 4.5.10affected
WAGO PFC200 G1 (750-820x-xxxx-xxxx)
Default version status: unaffected
0.0.0 to ≤ 3.10.10affected
WAGO PFC200 G2 (750-821x-xxxx-xxxx)
Default version status: unaffected
0.0.0 to ≤ 4.5.10affected
WAGO TP600 (0762-420x-8000-000x)
Default version status: unaffected
0.0.0 to ≤ FW 26affected
WAGO TP600 (0762-430x-8000-000x)
Default version status: unaffected
0.0.0 to ≤ 4.5.10affected
WAGO TP600 (0762-520x-8000-000x)
Default version status: unaffected
0.0.0 to ≤ 4.5.10affected
WAGO TP600 (0762-530x-8000-000x)
Default version status: unaffected
0.0.0 to ≤ 4.5.10affected
WAGO TP600 (0762-620x-8000-000x)
Default version status: unaffected
0.0.0affected
WAGO TP600 (0762-630x-8000-000x)
Default version status: unaffected
0.0.0 to ≤ 4.5.10affected
WAGO Edge Controller (0752-8303-8000-0002)
Default version status: unaffected
0.0.0 to ≤ 4.5.10affected
WAGO WP400 (0762-340x)
Default version status: unaffected
0.0.0 to ≤ 4.5.10affected